Free · no sign-up
Free DMARC check
See whether your domain has a DMARC record, what the policy does, and the exact record to publish if it is missing.
3 of 3 free checks left today · No sign-up. Public DNS data only.
What DMARC is and why it matters
DMARC is a TXT record at _dmarc.yourdomain.com. It tells receiving mail servers what to do with email that claims to be from your domain but fails SPF and DKIM: deliver it, send it to spam, or reject it. It also asks them to send you reports, so you can see who sends email in your name.
Without DMARC, anyone can send email that shows your domain in the From line. That is how most phishing that impersonates a company works. Google and Yahoo now require DMARC from bulk senders, so a missing record also hurts the delivery of your own email.
_dmarc.example.com. 3600 IN TXT "v=DMARC1; p=reject; rua=mailto:dmarc@example.com"p=reject refuses spoofed email. rua is where daily aggregate reports go.
Common problems we find
No DMARC record
Nothing tells receivers to reject spoofed email, so they usually deliver it.
Policy p=none
Good for the first weeks while you read reports, but it blocks nothing. Many domains never move on.
Several DMARC records
Receivers ignore DMARC entirely when they find more than one record.
Reports go nowhere
Without rua you cannot see which servers send email in your name.
How to fix it
- 01Publish
v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.comand read the reports for two to four weeks. - 02Make sure every service that sends your email (newsletter, CRM, helpdesk) passes SPF or DKIM.
- 03Move to
p=quarantine, then top=reject.
Questions
Will p=reject stop my own email?
Only email that fails both SPF and DKIM. That is why you start with p=none and check the reports first: they show any legitimate service you forgot to set up.
Do I need DMARC if I never send email from this domain?
Yes. Parked domains are spoofed too. Publish v=DMARC1; p=reject together with an SPF record of v=spf1 -all.
More checks: SPF · DKIM · DNSSEC · All DNS checks
Check the whole domain, not just one record
The free check covers SPF, DKIM, DMARC and MX in one go.