DMARC record checker
DNS Look checks the TXT record at _dmarc for the domain you enter and shows the published v=DMARC1 policy.
Enter a root domain or subdomain—no protocol or path needed. We’ll check _dmarc. automatically.
Reading the DMARC policy
- p=none requests monitoring without enforcement.
- p=quarantine asks receivers to treat failing mail as suspicious.
- p=reject asks receivers to reject failing mail.
- rua identifies destinations for aggregate reports.
- adkim and aspf control strict or relaxed identifier alignment.
Move to enforcement carefully
DMARC passes when either SPF or DKIM both authenticates and aligns with the visible From domain. Before moving from monitoring to quarantine or reject, review reports and fix legitimate sources that do not align.
A syntactically present record is not proof that every message is protected. Mailing lists, forwarding, subdomains, and third-party platforms can require additional analysis.
Quick answers
Frequently asked questions
Where is a DMARC record published?
At _dmarc followed by the domain, such as _dmarc.example.com.
Is p=none useless?
No. It enables reporting and is useful during discovery, but it does not ask receivers to block mail that fails DMARC.