dmarc-checker
DMARC Checker
Check your DMARC policy, enforcement level and reporting setup.
Verify your domain's DMARC record and understand your protection level. We parse your policy, subdomain policy, percentage and reporting addresses.


Confirm, Report, Check
We look up the TXT record at _dmarc.yourdomain.com and analyze it:
Frequently asked questions.
What DMARC policy should I use?
Start at p=none to monitor, then progress to quarantine and finally reject for full protection against spoofing.
Why do I need rua reporting?
Aggregate reports show you who is sending mail as your domain, so you can catch misconfigurations and abuse.
What's the difference between quarantine and reject?
Quarantine sends failing emails to spam, while reject blocks them outright before delivery — reject offers stronger protection but should only be used once you're confident in your setup.
Do I need both SPF and DKIM for DMARC to work?
You need at least one to pass and be aligned with your domain, but having both gives you redundancy if one fails.
What is the pct tag for?
It controls what percentage of failing mail your policy applies to — useful for gradually rolling out enforcement instead of applying it to 100% of traffic at once.
Can DMARC protect subdomains too?
Yes, using the sp tag you can set a separate policy for subdomains, which is important since attackers often spoof subdomains that lack their own DMARC record.