DMARC record checker
See whether your domain is protected against spoofing, and whether your DMARC reports actually arrive.
5 free checks per day · then from $0.04 per check — pricing
What the DMARC Checker checks
- Record found at _dmarc (or inherited from the parent)
- Policy p=, sp= and np=
- pct and DMARCbis t= testing flag
- DKIM/SPF alignment mode
- rua/ruf syntax
- External report authorization (RFC 7489 §7.1)
How it works
- 1
Enter your domain
- 2
Read your policy level and reporting status
- 3
Follow the steps from none → quarantine → reject
Frequently asked questions
Which DMARC policy should I use?
Start with p=none and a rua address to collect reports. When all legitimate senders pass SPF or DKIM with alignment, move to p=quarantine and then p=reject.
Why don't I receive DMARC reports?
The most common reason: your rua address is at another domain that has not authorized your domain with a <yourdomain>._report._dmarc.<theirdomain> TXT record. The checker tests this for you.
Is DMARC required?
Since February 2024 Google and Yahoo require DMARC (at least p=none) for senders of more than 5,000 messages per day; Microsoft followed in 2025 for Outlook.com. It is also the only standard that stops direct spoofing of your domain.