DMARC Checker
ServerCheck a DMARC record and get its policy explained in plain English.
How it works
Check a domain's DMARC record — the policy telling receivers what to do with mail that fails SPF and DKIM, and where to send reports. We explain the policy and flag the gaps.
Try an example
This check runs from our server so it can query DNS directly — the domain you enter is sent to our backend. Nothing is stored.
How this works: the domain you enter is sent to our server so it can query DNS directly and see what a receiving mail server sees. Nothing is stored.
About the DMARC Checker
DMARC ties SPF and DKIM together: it tells receiving servers what to do when a message fails both, and asks them to send you reports about mail claiming to be from your domain. This free DMARC checker reads your record and explains the policy, reporting setup and alignment in plain English.
Without DMARC you have no policy against spoofing and no visibility into who is sending as you.
The three policies
- p=none — monitor only. Nothing is blocked, but you receive reports. The right place to start.
- p=quarantine — failing mail goes to the spam folder.
- p=reject — failing mail is refused outright. The end goal, and what stops spoofing.
Alignment, briefly
DMARC passes only if SPF or DKIM passes and the matching domain aligns with the From address a recipient sees. Relaxed alignment (the default) accepts subdomains; strict requires an exact match. Relaxed is right for most senders.
Frequently asked questions
What does p=none actually do?
Nothing is blocked — it only asks receivers to report what they see. It's the safe first step so you can find every legitimate sender before enforcing.
How do I move from none to reject?
Publish p=none with an rua address, read the aggregate reports for a few weeks until all legitimate mail passes, then move to quarantine, then reject. Use pct= to roll it out gradually if you send at volume.
Why do I need the rua tag?
Without it you receive no aggregate reports, so you have no way of knowing whether your legitimate mail passes or who is spoofing you. Enforcing without reports risks blocking your own mail.
Do I need DMARC?
Increasingly yes — Google and Yahoo now require it for bulk senders, and it's the only mechanism that protects the visible From address from spoofing.