DMARC Record Checker
Enter your domain. We read your DMARC record and tell you whether it is enforcing, or only watching.
Free, no sign-up, no email needed for this check.
What DMARC actually decides
SPF and DKIM say who is allowed to send. DMARC is the record that says what a receiving server should do when someone else tries. Without it, each provider guesses on its own.
The part most people get wrong
Having a DMARC record is not the same as being protected. A policy of p=none means: notice the forgery, then deliver it anyway. It is a reporting mode meant for the first few weeks, and a lot of domains never move past it.
Reading it before you enforce it
Going straight to p=reject can bounce your own newsletters and booking confirmations. The normal path is none, then quarantine, then reject, watching the reports at each step.
Common questions
What does p=none mean?
It means no action is taken on messages that fail. You get reports, forged mail still arrives. It is a starting point, not a destination.
Do I need SPF and DKIM before DMARC?
Yes. DMARC checks the results of those two. Without at least one of them passing and aligned, a strict DMARC policy will block your own mail.
Where does the DMARC record go?
In a TXT record at _dmarc.yourdomain.com, not on the domain itself.