DMARC Record Checker
Look up a domain's published DMARC record, see it broken down in plain English, and catch common configuration gaps.
Live check — resolves your domain's DMARC record via Cloudflare DNS over HTTPS at request time, evaluated against RFC 7489. See the full methodology page.
What this checks
This tool queries _dmarc.<yourdomain> for a TXT record starting with v=DMARC1, parses every tag (p, sp, rua, ruf, pct, adkim, aspf), and flags common gaps — no domain has DMARC "fully solved" just by having a record; the policy strength and reporting setup matter as much as its mere presence.
Need to build a new DMARC record instead?
Use the DMARC Record Generator to build one with a guided rollout path from monitoring to full enforcement.
My domain has no DMARC record at all — is that urgent?
Increasingly yes for any domain that sends mail. Since 2024, Gmail and Yahoo require at least a p=none DMARC record for bulk senders, and its absence makes domain spoofing trivially easy for phishing targeting your organization or its customers, regardless of your SPF/DKIM setup.
I have p=reject — am I fully protected?
Against spoofing of your exact domain in the visible From header, yes, assuming pct=100. It does not protect against lookalike domains (e.g. examp1e.com instead of example.com), which is a separate, ongoing monitoring problem DMARC reports can help you spot if attackers try to impersonate you.