DMARC Checker
Check a domain's DMARC policy, reporting addresses, alignment settings, percentage rollout, and common mistakes that can leave the domain unprotected.
Start Here
Enter a domain and run DMARC Checker.
Review the DMARC Checker Result
Review the status, warnings, and recommended actions shown in the result panel.
Ready When You Are
Run DMARC Checker to see the DMARC Checker result and next actions.
About DMARC Checker
DMARC is the policy that tells inbox providers what to do when SPF and DKIM do not prove that a message is allowed to use your domain. It also gives you a way to receive aggregate reports about authentication results. The DMARC checker reviews the _dmarc DNS record, the policy, reporting address, rollout percentage, and common mistakes. Start with DMARC if you are deciding what policy to publish.
DMARC should usually move in stages. A monitoring policy can help you see who is sending for the domain before you ask inbox providers to quarantine or reject failing mail. The DMARC checker explains whether the domain is still in monitoring mode, whether reports are configured, and whether alignment needs review. Use DMARC Alignment before moving to enforcement so legitimate mail is not accidentally blocked.
What DMARC Checker Checks
- DMARC TXT lookup at _dmarc.domain
- Missing or duplicate DMARC records
- Policy strength: none, quarantine, or reject
- Aggregate report address checks
- Percentage rollout and subdomain policy
- Plain-English DMARC fix steps
Questions
Is p=none bad?
Not always. p=none is useful for monitoring and discovery. The policy becomes weak when a domain stays on p=none after all legitimate senders are already aligned.
Should every domain use p=reject immediately?
No. Moving too fast can block legitimate mail if SPF or DKIM alignment is incomplete. Review reports and send test messages before enforcing.