Free tool · DMARC checker
Is spoofed emailblocked or delivered?
Check a domain's DMARC policy, who gets its reports, and whether those reports actually arrive. Free, no sign-up.
We log the domain you check to keep this tool working and see which tools are worth building. See our Privacy Policy.
What we check in your DMARC record
The policy
p=none only watches. p=quarantine sends failing mail to spam. p=reject turns it away. sp= sets the same for subdomains.
The reach
pct= says how much failing mail the policy applies to. Anything under 100 lets the rest through.
The reports
rua= is where receivers send daily reports. If it points to another company, that company has to publish a record agreeing to take them, or the reports are dropped.
Frequently asked questions
Is p=none bad?
It is the right place to start, because it changes nothing while reports show you who sends as your domain. It does not stop spoofing, though. Once the reports show your real mail passes, move to p=quarantine and then p=reject.
Why are my DMARC reports not arriving?
If your rua address is on a different domain from the one being checked, that other domain has to publish a TXT record at yourdomain._report._dmarc.theirdomain with the value v=DMARC1. Without it, receivers drop the reports. This checker tests that for every report address.
Where does the DMARC record go?
In a TXT record at _dmarc.yourdomain.com. A subdomain without its own record uses the policy of the main domain, and this checker tells you when that is happening.
How do I write a DMARC record?
Use the free DMARC record generator. It starts you safely in monitoring mode with a report address, and shows the exact value to paste into your DNS.
More free email tools
Email security check
SPF, DKIM, DMARC, MTA-STS, TLS reporting, BIMI and DNSSEC in one check, with a grade.
SPF checker
See who may send as your domain and how many of the 10 DNS lookups you use.
DMARC record generator
Build a DMARC record step by step, starting safely in monitoring mode.
MTA-STS checker
Check that mail sent to you must arrive encrypted, and that your policy file works.
Hear about it the day your email setup changes
Domain Lab checks SPF, DKIM, DMARC, MTA-STS, TLS reporting, BIMI and DNSSEC every day, alongside registration, DNS and SSL, and tells you what changed and how to fix it. Free for your first domain.
Start monitoring free