Start your 7-day free trial, card not charged until it ends

DMARC monitoring

DMARC monitoring that shows whether real mail passes

DMARC monitoring means knowing what each domain's DMARC policy says and whether real email passes it. TLDTrack checks SPF, DKIM and DMARC on every domain you manage once a day, alerts you when a record disappears or a policy changes, and tests real messages to show what receiving servers see.

Start your free trial Run a free check

Free one-off checker, no account needed

01 · Why it matters

Why email authentication breaks quietly

Nothing errors when SPF or DMARC goes wrong. The mail just stops arriving, and you usually hear about it from the client.

What is DMARC monitoring?

Watch SPF, DKIM and DMARC together

DMARC monitoring is the checking of a domain's email-authentication records, SPF, DKIM and DMARC, so you know they are in place and that real mail passes them. SPF lists who may send mail for the domain, DKIM signs messages so they cannot be tampered with, and DMARC tells inboxes what to do when a message fails those checks. If any of the three breaks, legitimate email starts landing in spam and attackers can spoof the domain. TLDTrack checks all three on every domain you manage once a day and alerts you when one changes, and its email test shows whether a real message passes them.

A DNS edit takes it down

Someone adds a new sender, edits a TXT record, or migrates DNS and drops the SPF record. Suddenly the domain's mail fails authentication and starts landing in spam.

Spoofing without DMARC

With no DMARC policy, or one set to p=none, anyone can send email that looks like it comes from the domain. That is how phishing and invoice fraud reach a client's customers.

Gmail and Yahoo now require it

Bulk senders to Gmail and Yahoo must have SPF, DKIM and DMARC in place. A broken record can get a whole domain's mail throttled or rejected.

You manage many domains

Checking SPF, DKIM and DMARC by hand across a portfolio of client domains does not scale. TLDTrack checks every one each day and only tells you when something changes.

02 · Steps

How it works

01

Add your domains

Point TLDTrack at any domain you manage. It reads the live DNS records, no plugin or mail-server access needed.

02

We check SPF, DKIM & DMARC every day

SPF is checked for a policy that lets anyone send, DKIM is looked for at 21 common selectors, and the DMARC policy is graded none, quarantine or reject. MX, BIMI and MTA-STS records are checked too. The first check is stored as a baseline.

03

Alert when something changes

You get an alert when a DMARC record is removed or its policy changes, when a DKIM key is removed or added, and when SPF is removed or weakened. A change is read twice before it alerts, and a failed lookup never counts as a removed record.

04

Test a real message

Send an email to a one-time test address. TLDTrack reports the SPF, DKIM and DMARC results the receiving server saw, whether the sending IP is blacklisted, and DNS fixes you can paste in.

Email authentication is part of TLDTrack's wider email deliverability testing, alongside SPF monitoring, DKIM monitoring and DNS change alerts.

03 · Coverage

What we check

Every part of a domain's email authentication, in one place.

SPF

Checked for a record that lets anyone send (+all or ?all). The email test counts its DNS lookups against the limit of 10 and suggests a corrected record.

DKIM

Looked for at 21 common selectors, and checked on real mail by the email test, which reads the selector from the message itself.

DMARC

The policy is graded none, quarantine or reject. The email test adds alignment advice and a suggested record.

BIMI and MTA-STS

Checked for the records that show your logo in supporting inboxes and require encrypted delivery.

Daily change alerts

DMARC removed or its policy changed, a DKIM key removed or added, SPF removed or weakened. TXT records are also read every few hours, so any edit to the SPF record alerts too.

MX records

The mail servers a domain points to. A changed MX record alerts as a DNS change.

Live email test

A real message sent to TLDTrack shows whether it authenticates, how it was routed and whether the sending IP is blacklisted.

04 · Pricing

Simple, transparent pricing

Every paid plan starts with a 7-day free trial. Cancel during the trial and you won't be charged.

Free forever

Free

Monitor one site, free forever

$0/mo

1 website + 4 extra monitors

No credit card needed

  • Uptime checks every 5 minutes
  • Response time tracking
  • Domain expiry alerts
  • SSL certificate expiry alerts
  • Email alerts
Start free

7 days free

Starter

For individuals & small portfolios

$11/mo

Up to 5 websites

250 monitoring credits / month

  • Uptime, SSL, DNS & blacklist
  • Content & visual change monitoring
  • Accessibility (WCAG 2.2) monitoring
  • Email health & renewal alerts
  • PageSpeed & malware scanning
  • Free WordPress plugin
  • WHM & cPanel monitoring
  • Bulk import & export
  • Security, SEO & compliance scans
  • AI integration (Claude & ChatGPT)
Start free trial

Most popular

Pro

For active managers & agencies

$29/mo

Up to 25 websites

1,250 monitoring credits / month

  • Everything in Starter
  • Up to 5 team members
  • Client report builder
  • AI search visibility
  • Priority support
  • Security, SEO & compliance scans
  • AI integration (Claude & ChatGPT)
Start free trial

7 days free

Agency

For large portfolios & teams

$89/mo

Up to 100 websites

5,000 monitoring credits / month

  • Everything in Pro
  • Up to 20 team members
  • Agency CRM & white-label reports
  • Security, SEO & compliance scans
  • Dedicated support
  • AI integration (Claude & ChatGPT)
Start free trial

Bigger than 100 websites? Our Enterprise plan adds unlimited sites, custom data residency, an SLA, dedicated onboarding and custom integrations. Talk to us

*SMS alerts are an optional add-on on paid plans for UK mobile numbers, paid for with prepaid SMS credit packs. Prices exclude any applicable sales tax. Your card won't be charged during a paid-plan trial. Cancel anytime.

05 · Questions

Frequently asked questions

What is the difference between SPF, DKIM and DMARC?

SPF lists which servers are allowed to send email for your domain. DKIM adds a cryptographic signature so a message cannot be altered without detection. DMARC ties the two together and tells receiving inboxes what to do when a message fails. You need all three working for reliable, spoof-resistant email.

How often does TLDTrack check my records?

SPF, DKIM and DMARC are checked once a day on every domain with DNS monitoring switched on, and TXT records are read every few hours. You can run the check or an email test any time from the dashboard.

Do you read DMARC aggregate reports?

No. TLDTrack reads the DMARC record and tests real mail, but does not collect the reports that receiving servers send to your rua address. Point those at your own mailbox or a DMARC report service.

Do you offer a free DMARC checker?

Yes. Our free email deliverability test checks SPF, DKIM and DMARC on a real message, without an account.

Do I need to change my mail server or DNS?

No. TLDTrack reads your public DNS records from the outside, so there is nothing to install and no access to your mail server required. It works with any provider, Google Workspace, Microsoft 365, or your own server.

Can it check DMARC across many client domains?

Yes. Every domain you add is checked daily, and changes to SPF, DKIM or DMARC alert across all of them, in one inbox.
Mark Grice, founder of TLDTrack

Mark Grice, founder of TLDTrack. Runs FullyCoded, a Cornwall web agency, and built this to keep 500+ client sites in front of him every day.

What happens next

Never get caught by broken email again

Do it yourself

Start your free trial

Check a domain free right now, or add every client domain and check SPF, DKIM and DMARC from one dashboard. Your card is not charged for 7 days.

Start your free trial

Run the free checker

Talk it through

Arrange a call with Mark

If you would rather talk through how this works across every site you look after, we can go through it together.

Book a call

06 · Explore

Explore more of TLDTrack

All features overviewEvery check TLDTrack runs and what it costs.For agenciesManage every client domain in one dashboard.TLDTrack vs UptimeRobotHonest feature-by-feature comparison.Free email deliverabilityFree SPF / DKIM / DMARC checker, report by email.iOS & Android appsPush alerts when something breaks.