Free DMARC Checker
Look up a domain's DMARC record and see how firmly it rejects spoofed email.
No signup. We don't store or log the domains you check.
Checking domain...
That's one signal. Your site has more.
The Website Health Check covers the big picture: Google Lighthouse speed scores plus DNS, SSL, email authentication, and AI access in one report.
Run the Website Health CheckHow it works
We query the domain's _dmarc DNS record and read its policy: none (monitor only), quarantine (suspicious mail goes to spam), or reject (spoofed mail is refused outright). The verdict explains what your current policy does and what moving up a level would change.
When to use this
When customers report suspicious email that looks like it came from you, when a deliverability tool flags your domain, or before you tighten your policy — check what's actually published first. DMARC only works on top of SPF or DKIM, so check those too.
Frequently asked questions
What is DMARC in plain terms?
A DNS record that tells receiving mail servers what to do with email that claims to be from your domain but fails authentication: do nothing (none), send it to spam (quarantine), or refuse it (reject). It's how you stop other people from sending email as you.
Which policy should my domain use?
Reject is the destination, but don't jump straight there: start at none and watch the reports, move to quarantine once your own legitimate senders all pass, then to reject. A domain that sends no email at all should still publish a reject policy so no one else can send as it.
I have SPF — do I still need DMARC?
Yes. SPF says which servers may send for your domain, but without DMARC there's no instruction about what to do when a message fails the check. DMARC is the enforcement layer on top.
Check everything at once
One report covering speed, DNS, SSL, email authentication, and AI access — the signals that decide whether visitors, search engines, and AI assistants trust your site.
Run the Website Health Check