DMARC Checker
Look up a domain's DMARC record and see exactly what it does: the policy, where reports go, and what to fix.
Free, no account needed.
What this check looks at
- Whether a DMARC record is published at _dmarc.yourdomain and whether its syntax is valid.
- The policy (p=none, quarantine or reject), the subdomain policy (sp=) and the percentage it applies to (pct=).
- Where aggregate (rua=) and forensic (ruf=) reports are sent, including whether outside report addresses are authorized.
- Alignment modes for SPF (aspf=) and DKIM (adkim=), and common mistakes such as duplicate records or unknown tags.
Why DMARC matters
DMARC tells receiving mail servers what to do with messages that claim to be from your domain but fail SPF and DKIM. Without it, anyone can send email that looks like it came from you, and mailbox providers have no instructions from you on how to treat it.
Since 2024, Google and Yahoo require a DMARC record from anyone sending bulk email to their users. Even for smaller senders, a DMARC policy is one of the strongest signals that your domain is legitimate.
Moving from p=none to p=reject
Start with p=none and an rua= address so you receive reports without affecting delivery. Once the reports show that all of your legitimate services pass SPF or DKIM with alignment, move to p=quarantine, then p=reject. Our DMARC Reports service turns those reports into a clear list of who sends as your domain, so you know when it's safe to tighten the policy.
Frequently asked questions
What is a good DMARC record to start with?
v=DMARC1; p=none; rua=mailto:reports@yourdomain.com. It changes nothing about delivery but starts sending you reports, so you can see every service that sends as your domain before enforcing a policy.
Where is the DMARC record published?
As a TXT record on the _dmarc subdomain, for example _dmarc.example.com. There must be exactly one.
Does DMARC stop spoofing on its own?
Only at p=quarantine or p=reject. At p=none it only collects reports. The reports are what let you reach an enforcing policy safely.
Related tools
- DMARC Record GeneratorBuild a correct DMARC record in a few clicks, then copy it into your DNS.
- DMARC Report AnalyzerDMARC reports are XML files most people never read. dmarcful turns them into a clear picture of everyone sending email as your domain, and tells you what to fix.
- SPF Record CheckerValidate a domain's SPF record, expand every include and see how close it is to the 10-DNS-lookup limit.
- DKIM Record CheckerLook up a DKIM public key and check its type, length and syntax. Don't know the selector? Leave it blank and we'll try the common ones.
- What is DMARC?DMARC is a DNS record that tells mail servers what to do with email that claims to be from your domain but can't prove it. Here's how it works and how to set it up safely.