DMARC checker: read your policy and what to tighten
Check a domain's DMARC record: the policy, the share of mail it applies to, where aggregate reports are sent, and what to change next.
Free, no signup. DNS lookups only: nothing is sent to the domain's mail server.
The usual path to p=reject
- Publish
v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com(the DMARC record generator builds it for you) and collect reports for a few weeks. - Make every legitimate sender pass SPF or DKIM with your domain aligned.
- Move to
p=quarantine, optionally withpct=25rising to 100. - Finish at
p=reject: forged mail using your domain is refused outright.
DMARC protects your domain's name. Your sending reputation also depends on who you send to: hard bounces from dead addresses hurt it quickly, which is why lists are verified before big sends.
DMARC checker FAQ
What is DMARC?
A DNS record at _dmarc.yourdomain that tells receivers what to do with mail that fails SPF and DKIM alignment (nothing, quarantine or reject) and where to send reports about it.
Is p=none enough?
It is the right place to start: you get reports without affecting delivery. It does not protect your domain, though. Once the reports show only your own services, move to p=quarantine and then p=reject.
Do I need DMARC to send to Gmail and Yahoo?
Since 2024, Gmail and Yahoo require bulk senders to publish a DMARC record (p=none is accepted) along with SPF and DKIM.
What does pct mean?
The percentage of failing mail the policy applies to. It lets you roll out quarantine or reject gradually; the default is 100.
What are rua reports?
Daily aggregate reports from receivers, sent to the rua address, showing which servers sent mail as your domain and whether it passed. They are how you find services you forgot to authorise.
More free tools
- MX lookup
See a domain's mail servers and which provider runs them.
- SPF checker
Check the SPF record, its DNS lookup count and the all mechanism.
- DKIM checker
Find a domain's DKIM keys and check their length and status.
- BIMI checker
See whether inboxes can show your logo, and what is missing.
- Disposable email checker
Find out if a domain is a throwaway inbox service.
- SPF record generator
Build a correct SPF record for the services that send your email.
- DMARC record generator
Create a DMARC record, from monitoring to full protection.
- Free email verifier
Check whether one address actually exists, with a live mailbox check.
A healthy domain is half of it. Verify the addresses too.
Free credits on sign-up. No card. You only pay for definite answers.
Start free