DMARC Checker
Enter a domain to see whether it publishes a DMARC policy and what it says.
Overview
DMARC (Domain-based Message Authentication, Reporting and Conformance) is a TXT record published at _dmarc.<domain> that tells receiving mail servers what to do with messages that fail SPF and DKIM checks, and where to send reports about them. This tool queries that specific record and shows it exactly as published.
Examples
How It Works
- Enter a domain name, e.g. example.com.
- Click Check to query _dmarc.<domain> for a DMARC record.
- Review the policy if one is found, or a clear "not found" result if not.
Use Cases
Confirming a DMARC rollout
Check that a domain's DMARC policy has moved from monitoring (p=none) to enforcement (p=quarantine or p=reject) as planned.
Diagnosing spoofed email reports
Check whether a domain lacks DMARC enforcement, which can make it easier for attackers to spoof its address.
Tips
- A p=none policy only requests reporting, not enforcement — mail that fails checks is still delivered.
- DMARC depends on SPF and/or DKIM being correctly configured and aligned — check the SPF Checker alongside this if DMARC results look unexpected.
FAQ
The domain hasn't published a DMARC policy, so receiving servers have no domain-specified guidance on what to do with mail that fails SPF/DKIM checks.
They're the policy levels DMARC supports: none only requests reporting with no enforcement, quarantine asks receivers to treat failing mail as suspicious (e.g. spam folder), and reject asks them to refuse it outright.