Back to Tools

DMARC Record Checker

Check your domain's DMARC policy to protect against email spoofing and phishing. Verify your DMARC record configuration and get recommendations for improvement.

DMARC Record Checker

Verify your domain's DMARC policy configuration

AI-Powered Analysis

What is DMARC?

  • Builds on SPF and DKIM authentication
  • Tells receivers what to do with failed emails
  • Provides reporting on authentication results
  • Protects your domain from spoofing attacks

About this tool

DMARC is the final step in email authentication, working alongside SPF and DKIM to tell inbox providers what to do with unauthenticated messages. Start with a monitoring policy ("none") and gradually move to "reject" as your senders align. To ensure your records are set correctly, use our DNS propagation checker to verify global visibility. For deep debugging, the email header analyzer will show exactly how your policy evaluated each message.

Frequently Asked Questions

DMARC (Domain-based Message Authentication, Reporting & Conformance) is an email authentication protocol that builds on SPF and DKIM. It tells receiving servers what to do when emails fail authentication.

DMARC has three policies: 'none' (monitor only), 'quarantine' (send to spam), and 'reject' (block entirely). Start with 'none' to monitor, then gradually move to 'reject' for full protection.

DMARC reports show who is sending email using your domain, whether they pass authentication, and from which IP addresses. Use the 'rua' tag to receive aggregate reports.

DMARC records propagate within hours, but you should monitor reports for 2-4 weeks before enforcing a strict policy. This helps identify legitimate senders that might fail authentication.