DMARC checker
Look up a domain's DMARC policy — whether it exists, how strict it is, and where failure reports get sent.
Queries the TXT record at _dmarc.<domain> directly, right now.
Enter a domain to check its DMARC policy
Whether a record exists, how strict it is, and where reports go.
DMARC builds on SPF and DKIM to specify what receiving mail servers should do with messages that fail both checks: reject them, quarantine them to spam, or monitor and report without taking action. It is published as a single TXT record at _dmarc.<domain>. Without it, spoofed email claiming to originate from that domain faces no enforcement.
The policy tag (p=) determines the actual enforcement level: none only monitors, quarantine routes failing messages to spam, and reject blocks them outright. Most domains begin with none while confirming that all legitimate mail sources are correctly configured, then tighten the policy to quarantine or reject once confident that no legitimate mail will be affected.
The rua tag, when present, specifies where aggregate reports are sent: a regular summary of which servers are sending mail on behalf of the domain, and whether that mail passes or fails authentication.