Paste in a domain and instantly see its DMARC policy, reporting address, and whether it's actually enforcing anything — or just monitoring.
Free, no signup required. 10 checks/hour per IP.
Common questions
What is a DMARC record?
DMARC (Domain-based Message Authentication, Reporting and Conformance) is a DNS TXT record that tells receiving mail servers what to do with messages that fail SPF or DKIM alignment — monitor only, quarantine, or reject outright.
What's the difference between p=none, p=quarantine, and p=reject?
p=none only asks for reports and takes no action — most domains start here, but it provides zero actual spoofing protection. p=quarantine routes failing mail to spam. p=reject blocks it entirely. Moving to reject is the real security milestone.
Why does DMARC matter for deliverability, not just security?
Major mailbox providers (Gmail, Yahoo) now require DMARC for bulk senders. Beyond blocking spoofing, having DMARC at p=quarantine or higher is also a trust signal that improves inbox placement for your legitimate mail.
What is the rua tag in a DMARC record?
rua specifies the email address that receives aggregate DMARC reports — a daily summary of who's sending mail claiming to be from your domain, including legitimate services and SPF/DKIM pass/fail results. It's also a strong signal of which ESP a domain uses.