Free Tool
DMARC Record Checker
Verify your domain's DMARC policy and email authentication configuration.
What is DMARC?
DMARC (Domain-based Message Authentication, Reporting & Conformance) is an email authentication protocol that builds on SPF and DKIM. It allows domain owners to publish a policy that tells receiving mail servers what to do when an email fails authentication checks -- whether to reject it, quarantine it, or allow it through.
DMARC also provides a reporting mechanism so domain owners can receive feedback about emails sent using their domain, helping them identify unauthorized use and improve their email authentication setup over time.
DMARC Policies Explained
reject
The strictest policy. Emails that fail DMARC authentication are rejected outright and never delivered. This provides the strongest protection against spoofing and phishing using your domain.
quarantine
A moderate policy. Emails that fail authentication are typically placed in the recipient's spam or junk folder rather than their inbox. Useful as a stepping stone toward a reject policy.
none
A monitoring-only policy. Emails that fail authentication are still delivered normally. This is typically used when first implementing DMARC to collect reports without affecting mail delivery.
Setting Up DMARC
To set up DMARC, you need to add a TXT record to your domain's DNS at the subdomain _dmarc.yourdomain.com. A basic DMARC record looks like this:
- •v=DMARC1 -- identifies this as a DMARC record (required).
- •p=reject -- sets the policy for emails that fail authentication (reject, quarantine, or none).
- •rua=mailto:... -- the email address where aggregate reports should be sent.
Before enabling DMARC, make sure your domain has valid SPF and DKIM records in place. Start with a p=none policy to monitor results, then gradually move to quarantine and finally reject once you are confident all legitimate mail is properly authenticated.
Automate DMARC checks with our API
Monitor DMARC compliance across all your domains. Detect policy changes and protect your sender reputation programmatically.