Free DMARC Checker
DMARC tells receiving mail servers what to do with messages that fail SPF and DKIM checks, and it's required by Gmail and Yahoo for bulk senders. Enter a domain to check its public `_dmarc` record in seconds.
How it works
We look up the TXT record at `_dmarc.yourdomain.com` — the single place DMARC policy lives.
We parse the record's policy (`p`), percent (`pct`), and report (`rua`) tags and grade it pass, warning, or fail.
We show you the raw record plus a plain-English explanation of exactly what to fix.
Common DMARC errors
- •No DMARC record at all — publishing `v=DMARC1; p=none; rua=...` is the safe first step.
- •`p=none` only — you're monitoring but not blocking: move to `p=quarantine`, then `p=reject`.
- •Missing `rua=` tag — you'll get no aggregate reports, so you can't see who's spoofing you.
- •`pct=` below 100 — only a fraction of failing mail is enforced, leaving a gap.
- •SPF or DKIM that doesn't align with your From domain, so DMARC can't pass.
Frequently asked questions
What does a DMARC pass mean?
It means your record has a valid `p=` policy (quarantine or reject) that's applied to 100% of mail, and you have an `rua=` address collecting reports. That's the configuration Gmail and Yahoo expect from bulk senders.
Do I need DMARC if I already have SPF and DKIM?
Yes. SPF and DKIM authenticate your mail, but DMARC is what tells receiving servers what to do when both fail and which domain must align. Without it, spoofed mail can slip through and you get no visibility into who's sending as you.
Is `p=none` enough?
It's a safe starting point because it rejects nothing, but it offers no protection. Treat `p=none` as a monitoring stage, then escalate to quarantine and reject once your reports confirm every legit sender passes.
Keep this record healthy 24/7
A single check only tells you how your DMARC looks right now. Sign up for continuous monitoring and get alerted the moment your records change or break.
Start free monitoring