DMARC Checker
This free DMARC checker reads a domain's DMARC record and tells you, in plain English, how well it protects the domain from email spoofing.
What is DMARC?
DMARC is a TXT record at _dmarc.yourdomain that tells receiving servers what to do with mail that fails SPF and DKIM checks: deliver it, send it to spam, or reject it.
It also asks receivers to send you reports, so you can see every service sending mail as your domain, legitimate or not.
How to roll out DMARC safely
Start with p=none and a rua address, so you only collect reports and nothing gets blocked. Read the reports for a couple of weeks and fix any service that fails SPF or DKIM.
Then move to p=quarantine, and finally p=reject. Doing it in that order protects your domain without losing real mail on the way.
Frequently asked questions
Do Gmail and Yahoo require DMARC?
Yes, for bulk senders. Since February 2024, Google and Yahoo require anyone sending more than 5,000 messages a day to their users to publish a DMARC record (p=none is the minimum).
What's the difference between p=none, quarantine and reject?
p=none only monitors. p=quarantine sends failing mail to spam. p=reject refuses it outright. Reject is the goal, and none is where you start.
What are rua reports?
Daily XML summaries from receivers listing which IP addresses sent mail as your domain and whether they passed. They're how you find forgotten senders before tightening the policy.
Where does the DMARC record go?
In a TXT record on the _dmarc subdomain, for example _dmarc.example.com. Not on the domain itself.