How do I check my domain's DMARC record?

Enter your domain in the DMARC Checker to validate the _dmarc record's policy, alignment, and reporting tags.

What does p=none vs p=reject mean?

p=none only monitors and sends reports without affecting delivery; p=quarantine sends failing mail to spam; p=reject blocks it entirely. Start with none, then enforce once legitimate senders authenticate.

Why do I need DMARC if I have SPF and DKIM?

SPF and DKIM authenticate individually, but DMARC ties them to your From domain with alignment rules and tells receivers what to do when both fail — without it, attackers can still spoof your domain.

How long until a DMARC change takes effect?

DNS changes typically propagate within minutes to a few hours depending on TTL; receivers pick up the new record on their next lookup after cached entries expire.

DNS & NETWORK TOOLS · FREE ONLINE TOOL

DMARC Checker

Look up DMARC records and grade your domain policy strengthSPF and DKIM prove things about an email, but neither tells servers what to do when authentication fails. That instruction lives in your DMARC policy record. This analyzer reads the live record and breaks every tag into plain language.

✓ Free to use✓ No sign-up✓ Ready in your browser

// DMARC CHECKER · GET STARTED

Use DMARC Checker

Look up DMARC records and grade your domain policy strength

// DMARC CHECKER · AT A GLANCE

DMARC Checker: what to know first.

Look up DMARC records and grade your domain policy strength

01
DMARC is what turns SPF and DKIM from advisory signals into enforceable policy. Without it, receivers decide on their own what to do with mail that fails authentication, and you get zero visibility into spoofing attempts. The DMARC Checker reads your live _dmarc record, validates the v=DMARC1 syntax, and grades the policy so you know exactly where you stand.
02
Each tag in the record is explained in plain language, from the headline policy (p) to reporting addresses (rua, ruf), alignment modes (adkim, aspf) and the percentage roll-out (pct). Whether you are publishing your first record or auditing a client domain, the grade and recommendations give you a clear path from monitoring to full reject enforcement.

// DMARC CHECKER · HOW IT WORKS

How to use the DMARC Checker

Enter domain

Enter the domain you want to check (e.g. example.com).

Run the check

Click "Check DMARC" to query the live TXT record at _dmarc.yourdomain.

Read your grade

Read your policy grade, the per-tag explanations, and the recommendations.

// DMARC CHECKER · ABOUT THIS TOOL

About the DMARC Checker

DMARC is what turns SPF and DKIM from advisory signals into enforceable policy. The DMARC Checker reads your live _dmarc record and grades the policy so you know exactly where you stand.

Each tag is explained in plain language, from the headline policy to reporting addresses, with a clear path from monitoring to reject enforcement.

Where it helps most

Knowing what your policy actually does today.

Policy rollouts

Plan the standard progression from p=none to quarantine to reject over a few weeks, using the interpreted policy strength as your guide.

Post-DNS-change audits

Security teams use it after every DNS change, since a single typo in a DMARC record silently disables the whole policy.

Spoofing protection

Founders use it to confirm their domain cannot be trivially spoofed, checking that real enforcement sits above a monitor-only policy.

Report visibility

Missing rua addresses mean you never see the aggregate reports showing who sends mail on your behalf; the checker flags the gap.

Reading the report

The two checks that matter most.

Syntax validity

The checker confirms your record is syntactically valid, because a typo in a DMARC record silently disables the whole policy.

Policy strength

It interprets the policy strength so you can see whether your domain currently sits at monitor, quarantine or reject today.

Missing tags

It shows which tags are missing and what the gaps cost you, from absent report addresses to loose alignment modes.

DMARC Checker: built for trust

See exactly what your policy does today, which tags are missing, and what the gaps cost you.

// DMARC CHECKER · COMMON QUESTIONS

DMARC Checker FAQs

What does a DMARC policy of p=none actually do?

It publishes a monitoring-only policy. Receivers take no action on failing mail but send you aggregate reports. It is the safe starting point, but it does not stop spoofing.

How do I move from p=none to p=reject safely?

What are rua and ruf tags in DMARC?

Why does my DMARC record show as invalid?

What is DMARC alignment?

tools-guide

Security Headers Checker: Grade Your Site's Defenses

Free security headers checker. Instantly scan HSTS, CSP, X-Frame-Options and more on any site, get an A to F grade and clear steps to fix every website gap.

Read article →