Email Tools
DMARC Checker
Check whether a domain has a DMARC policy configured.
Enter a domain to check its DMARC policy.
More Email Tools
View all 8JustChecker tracks your email authentication records continuously.
What Is DMARC?
DMARC tells receiving servers what to do when an email fails SPF and DKIM alignment - allow, quarantine or reject it - and where to send reports. It is published as a TXT record at _dmarc.yourdomain. This tool finds and explains it.
When to Use It
- To protect your domain from being used in phishing emails.
- To meet Google and Yahoo bulk-sender requirements, which require a DMARC record.
How to Use It
- Enter the domain.
- Review the policy (
p=) and reporting addresses (rua=).
Understanding the Result
p=none only monitors, p=quarantine sends failures to spam and p=reject blocks them. Start with none, read the reports, then move to quarantine and reject.
Limitations
DMARC only works if SPF or DKIM pass and align with the From domain. Create a record with the DMARC Record Generator.
Frequently Asked Questions
DMARC builds on top of both - it requires that a message pass SPF or DKIM (and that the passing result is properly "aligned" with the visible From address), then tells receiving servers exactly what to do (nothing, quarantine, or reject) when a message fails.
"none" only monitors and reports without affecting delivery; "quarantine" asks receiving servers to send failing mail to spam; "reject" asks them to block it outright - most domains start at "none" to gather data before tightening to a stricter policy.
DMARC reports reveal ANY email claiming to be from your domain, including unauthorized senders (spoofing/phishing attempts) - even a domain that only sends transactional email benefits from knowing if it's being impersonated.
DMARC requires at least one of SPF or DKIM to be properly configured and aligned to have any effect - publishing a DMARC record alone, with neither underlying mechanism in place, provides no real protection.
Yes - if your own legitimate sending services aren't yet properly aligned with SPF/DKIM, a strict reject policy can cause your own genuine email to be rejected; the recommended path is none → quarantine → reject, monitoring reports at each stage.
It means the domain in the visible "From" address must match (exactly or by matching organizational domain, depending on the "strict" or "relaxed" mode configured) the domain that SPF or DKIM actually authenticated - a mismatch fails DMARC even if SPF/DKIM individually passed.
Explore More Tools
Keep going with related categories and our most used tools.