The Email Stack Scan a domain
← All free tools

DMARC checker

/dmarc

Read a DMARC policy and see exactly what it tells inboxes to do.

Read live from public DNS at _dmarc. Nothing is stored.

What DMARC does

  1. What it is

    DMARC ties SPF and DKIM together and tells receivers what to do when a message fails both.

  2. Why it matters

    It turns "this looks wrong" into a clear instruction: monitor, quarantine, or reject.

  3. Without it

    Without DMARC, failing mail is a judgement call for each receiver — so spoofed mail often still lands in the inbox.

What we check

  • Whether a valid DMARC record exists at _dmarc.yourdomain
  • The enforcement level: p=none, p=quarantine or p=reject
  • Every tag, explained in plain English
  • Whether you're collecting aggregate reports (rua)

Common questions

What does p=none actually do?

Nothing enforcing. It tells inboxes to take no action on failing mail and just send you reports. It's monitoring only — spoofed mail can still land.

Is p=reject safe to turn on?

Only after your reports show every legitimate sender is aligned. Moving too fast drops real mail. See our guide on going from p=none to p=reject.