DMARC Record Checker
Check whether a domain is protected against email spoofing. The checker finds the DMARC record at _dmarc.domain (falling back to the organisational domain), explains every tag, and grades the policy — from monitor-only p=none to full protection with p=reject.
Enter a domain and we look up the _dmarc TXT record over DNS-over-HTTPS. The checker validates the syntax, flags multiple records (which disable DMARC), explains the policy, percentage, subdomain policy, alignment modes and report addresses, and if no record exists gives you a safe starter record to publish.
Instant Results
Live checks in seconds
Nothing Stored
No logs of what you check
No Sign-Up
Free, no credits or email
Suggest a Feature or Improvement for DMARC Record Checker
Need custom options, higher limits, or extra format support? Let our engineering team know!
How to use DMARC Record Checker
- 1Enter the domain.
- 2Check the policy and findings.
- 3Publish or fix the _dmarc TXT record.
- 4Move from p=none to quarantine and reject as reports confirm your senders pass.
What DMARC adds
DMARC ties SPF and DKIM to the From address people see: a message passes only if SPF or DKIM passes for a domain aligned with the From domain. The policy tells receivers what to do with failures — nothing (none), send to spam (quarantine) or reject — and rua reports show you who is sending mail as your domain.
Since 2024, Gmail and Yahoo require a DMARC record for bulk senders.
Rolling out safely
Start with p=none and aggregate reports, identify every legitimate sender and make sure they pass SPF or DKIM with alignment, then move to p=quarantine and finally p=reject. Check the building blocks with the SPF Record Checker and DKIM Record Checker.
Frequently Asked Questions
Is p=none useless?
It doesn't block spoofed mail, but it's the right first step: it turns on reporting so you can safely move to quarantine or reject.
Where do DMARC reports go?
To the rua address. Reports are XML; a DMARC report service or open-source parser makes them readable.
What do you do with the domains and URLs I check?
Our server performs the lookup once and returns the result to your browser. We don't store the addresses you check or build a history. Private and internal addresses are blocked.
Guides & Tutorials
Related Tools
SPF Record Checker
Validate a domain's SPF record, count DNS lookups against the limit of 10, and see the include tree.
DKIM Record Checker
Look up and validate DKIM public keys — with automatic search of 45 common selectors.
Domain Security Checker
Scan a domain's email, DNS and HTTPS security: SPF, DMARC, DNSSEC, CAA, SSL, HSTS and headers.