Free DMARC checker, no signup. Enter a domain name to read its DMARC record, see its policy in plain words, and get every tag explained. The check runs in your browser against public DNS.
What This DMARC Checker Tells You
- The DMARC record published at
_dmarc.in front of the domain. - The policy: none, quarantine or reject, and what each does to failing mail.
- Each tag explained in one line.
- The parent domain’s record, when you check a subdomain that has none of its own.
- The common gaps: no record, two records, no policy, no report address.
The Three DMARC Policies
| Policy | What receivers do with mail that fails | Use it when |
|---|---|---|
p=none | Deliver it as usual and send reports. | You are starting and want to see who sends for your domain. |
p=quarantine | Put it in spam. | The reports show your real senders pass. |
p=reject | Refuse it. | Every real sender passes and you want spoofed mail blocked. |
p=none protects nothing by itself. It is a monitoring step. A domain that stays on it for good can still be spoofed.
How to Read a DMARC Record
| Tag | Meaning |
|---|---|
v=DMARC1 | Version. Required, and it comes first. |
p= | Policy for the domain. Required. |
sp= | Policy for subdomains. Without it, subdomains follow p. |
rua= | Address that receives the daily summary reports. |
ruf= | Address for copies of individual failures. Few receivers send them. |
pct= | Share of failing mail the policy applies to. 100 when absent. |
adkim= / aspf= | How closely the DKIM and SPF domains must match the From domain: r relaxed (the default) or s strict. |
What DMARC Checks
DMARC passes when SPF or DKIM passes and the domain it passed for matches the From address the reader sees. That match is called alignment. It is what SPF and DKIM lack by themselves.
A message can pass SPF and still fail DMARC. This happens when a sending tool uses its own bounce domain and does not sign with yours.
Subdomains
A subdomain without its own DMARC record is covered by the record of its parent domain. The parent’s sp tag sets the policy; when there is none, p applies. Enter a subdomain and the checker shows which record covers it.
After the DMARC Check
DMARC rests on the two other records. Check them with the SPF Checker and the DKIM Checker. The SPF, DKIM and DMARC guide walks through the three together, and the Domain Reputation Checker gives a four-point view of the domain.
How Many Domains Lack MX, SPF or DMARC?
Of 47 domains checked here in the last 30 days, 38% had MX, SPF and DMARC all set; 62% were missing at least one of them.
From this site's own log of checks, 30 days, each domain counted once with its latest result. 3 checks that ended in an error are left out. Updated 24 Oct 2026. Domains are never shown.
Frequently Asked Questions
What is a DMARC record?
A DMARC record is a DNS TXT record published at _dmarc.yourdomain.com. It tells receiving servers what to do with mail that fails SPF and DKIM checks for your domain, and where to send reports about it.
How do I check a DMARC record?
Enter the domain in the checker above. It shows the record, the policy and each tag. From a terminal, run dig txt _dmarc.example.com +short.
What does p=none mean in DMARC?
p=none tells receivers to deliver failing mail as usual and only send reports. It is a monitoring setting. It does not stop anyone from spoofing the domain.
What is the difference between quarantine and reject?
With p=quarantine, mail that fails DMARC goes to the spam folder. With p=reject, the receiving server refuses it and it is never delivered.
Do I need SPF and DKIM for DMARC to work?
You need at least one of them, set up so that it matches your From domain. DMARC passes when SPF or DKIM passes with alignment. Setting up both is the safer choice, since forwarding often breaks SPF.
Does a subdomain need its own DMARC record?
No. A subdomain without a record is covered by its parent domain’s record, through the sp tag when there is one and the p tag otherwise. Add a separate record only when the subdomain needs a different policy.