DMARC record checker
Enter a domain to read its live DMARC record and get a verdict: is a policy set, is it strong enough to stop spoofing, and are aggregate reports being collected?
What this checker tells you
DMARC sits on top of SPF and DKIM and tells receivers what to do with mail that fails authentication. This tool reads the record at _dmarc.yourdomain and grades it: is a policy set, how strict is it, and are you collecting reports?
- Record present — no DMARC means your domain can be spoofed into inboxes
- Policy (p) — 'reject' fully blocks spoofing; 'none' only monitors
- Reports (rua) — an address here gives you visibility into every source
Strengthening your DMARC
- Start at p=none with a reporting address to see all your sources
- Authenticate every legitimate source with SPF or DKIM alignment
- Move to p=quarantine, then p=reject as you gain confidence
- Keep monitoring reports even after reaching reject
Frequently asked questions
Does this change my DNS?
No. It's a read-only lookup of your public _dmarc TXT record and changes nothing on your domain.
My policy is p=none — is that enough?
It only monitors; it doesn't stop spoofing. Use the reports to authenticate your sources, then raise the policy to quarantine and finally reject.
Do I need SPF and DKIM for DMARC to work?
Yes. DMARC evaluates the results of SPF and DKIM with alignment, so both should be in place before you enforce a strict policy.
Start sending in minutes
Create a free account, connect your domain and reach your audience across every channel — no credit card needed.
Free plan forever · No credit card required · Set up in minutes