DMARC checker

Enter a domain to see its DMARC policy explained: what happens to forged mail, where reports go and how strict the alignment is.

Only public DNS records are read; nothing is stored.

Create a DMARC record

TXT record at _dmarc.your-domain

v=DMARC1; p=none

Start with p=none and a report address, read the reports for a few weeks, then tighten the policy to quarantine and reject.

What DMARC does

DMARC tells receiving servers what to do with mail that uses your domain in the From line but fails SPF and DKIM: deliver it, move it to spam or refuse it.

The reports show every server that sends in your name, so you can find forgotten services before you switch to a strict policy. Gmail and Yahoo expect a DMARC record from bulk senders.