Email authentication

Free DMARC Checker

Check and analyze your domain’s DMARC policy instantly — stop spoofing and protect your sending reputation.

What is a DMARC record?

DMARC (Domain-based Message Authentication, Reporting & Conformance) ties SPF and DKIM together. It’s a DNS TXT record at _dmarc.yourcompany.com that tells receivers what to do when a message fails authentication — monitor (p=none), quarantine, or reject — and where to send aggregate reports.

How to use this DMARC checker

  1. Enter your domain and run the check.
  2. Review the policy (p=), the reporting address (rua=) and alignment settings.
  3. Publish or update the TXT record at _dmarc in your DNS.
  4. Move from p=none to quarantine then reject as your reports come back clean.

Why DMARC matters for deliverability

DMARC is what Google and Yahoo now require from bulk senders. A missing policy — or one stuck on p=none forever — leaves your domain open to spoofing and caps your deliverability ceiling. It’s the third pillar that makes SPF and DKIM enforceable.

FAQ

How do I check my DMARC record?

Enter your domain above. The tool reads the TXT record at _dmarc.yourdomain.com and parses the policy, reporting and alignment tags.

What is a good DMARC policy?

Start at p=none with a rua= reporting address to gather data, then tighten to quarantine and finally reject once legitimate mail passes.

p=none vs quarantine vs reject?

none only monitors; quarantine sends failing mail to spam; reject blocks it outright. Reject is the end goal, reached gradually.

Is DMARC required?

For senders mailing Gmail and Yahoo in volume, yes — both enforce DMARC alongside SPF and DKIM. Even at lower volume it protects your domain from spoofing.