What does this DMARC checker test for cold email?
It reads the TXT record at _dmarc.yourdomain.com and checks that it starts v=DMARC1, that it sets a policy with p=, and that a rua= address is there to receive the daily aggregate reports. It also flags pct=, which the current DMARC standard (RFC 9989) removed and receivers now ignore.
Which DMARC policy should a cold email domain use?
Start with p=none and a reports address. Google and Yahoo require bulk senders to publish DMARC, and p=none meets that requirement while you confirm that SPF and DKIM pass for every service that sends as the domain. Once the reports show only your own mail passing, move to quarantine and then reject. Our DMARC policy guide covers each step.
Why does DMARC need a reports address?
Without rua=, DMARC still applies your policy, but you never see the results. The daily reports show every server that sent mail claiming to be your domain and whether it passed, which is how you catch a broken DKIM key or a tool you forgot about before it costs you inbox placement. Our guide to reading DMARC reports shows what to look for.
My DMARC record is fine, so why does my cold email fail DMARC?
The record only says what to do when checks fail. DMARC passes when SPF or DKIM passes for a domain that matches your From address. If your sending tool uses its own domain for either, DMARC fails even with a perfect record. See fixing DMARC fail, check every record with the full domain checker, or build a new record with the DMARC record generator.