DMARC Record Checker
Enter a domain to check its DMARC policy, alignment modes and report addresses.
Frequently asked questions
What is DMARC?
DMARC is a TXT record published at _dmarc.yourdomain.com. It tells receiving servers what to do with mail that fails SPF and DKIM checks for your domain, and where to send reports about it. It is the main defense against someone spoofing your From address.
What is the difference between p=none, p=quarantine and p=reject?
p=none only monitors: failing mail is still delivered and you get reports. p=quarantine asks receivers to treat failing mail as suspicious, usually by sending it to spam. p=reject asks them to refuse it outright. Only quarantine and reject actually protect your domain.
How do I roll out DMARC safely?
Start with p=none and a rua address, and read the reports to find every service that sends mail as your domain. Fix any legitimate sender that fails, then move to p=quarantine, optionally with a low pct, and finally to p=reject.
What are rua and ruf?
rua is the address that receives aggregate reports, daily XML summaries of who sent mail as your domain and whether it passed. ruf is for individual failure reports, which many large mailbox providers do not send for privacy reasons.
What does pct do?
pct is the percentage of failing mail the policy applies to, from 0 to 100, and defaults to 100. It lets you apply quarantine or reject gradually. Mail outside the percentage gets the next weaker policy.
Do I need SPF and DKIM before DMARC?
Yes. DMARC passes when SPF or DKIM passes and the passing domain matches the visible From domain. Without working SPF or DKIM, every message would fail DMARC.
Is DMARC required for sending bulk email?
Gmail and Yahoo have required senders of more than 5,000 messages a day to their users to publish a DMARC record, along with SPF and DKIM, since 2024. Having one is good practice for any domain that sends mail.