Free DMARC checker
Enter a domain and we'll look up its public DMARC record, which tells inboxes what to do with emails that fail checks. This is a passive DNS look-up, for information only. DMARC helps stop spoofing, but it doesn't stop it on its own.
What this checks
This is a passive, light-touch check. It only reads what a normal browser visit and public DNS can see. It isn't a security test, a penetration test or a guarantee.
Check a site
Checking your site… This usually takes under a minute.
What your result means
- Pass: Your domain tells inboxes to reject or quarantine emails that pretend to be from you.
- Worth a look: You have DMARC set to p=none, so fake emails are reported but not stopped.
- Needs fixing: You have no DMARC record, so it's easier for someone to send fake emails in your name.
- How to fix: Add a TXT record at _dmarc.yourdomain starting with v=DMARC1; p=none, check the reports, then move to p=quarantine or p=reject.
FAQs
Where does the DMARC record go?
As a TXT record at `_dmarc.yourdomain` (for example `_dmarc.example.co.uk`), at the place that hosts your DNS.
Should I start with p=none?
Yes, that's the usual first step: collect reports, check nothing important is failing, then move to quarantine or reject.
Does DMARC stop all fake emails?
No. It helps stop spoofing when SPF and DKIM are set up too. It isn't a guarantee.
Is this email security advice?
No. It's an automated look at a public DNS record, for information only. Your email provider can tell you the right set-up for your domain.