DMARC record checker
DMARC is what actually stops someone sending mail that appears to come from your domain. Without it, SPF and DKIM protect an address your recipients never see.
Free, no signup, no daily limit. We do not store what you check here.
p=none protects nothing
A DMARC record with p=none means "tell me what is happening, but deliver everything anyway". It is the correct place to start, because it gives you reports without breaking legitimate mail. But a domain sitting at p=none for years has monitoring, not protection - and most domains that publish DMARC never move past it.
Why this matters for deliverability, not just security
Major mailbox providers now expect bulk senders to publish DMARC. A missing or permanently permissive policy affects whether your legitimate mail reaches the inbox, so this stopped being purely a security question.
Questions
Where does the record live?
In a TXT record at _dmarc.yourdomain.com, not at the domain root.
What should I set the policy to?
Start at none with rua reporting, confirm every legitimate sender passes, then move to quarantine and finally reject. Jumping straight to reject will block mail you actually wanted sent.
Related tools
SPF record checker
Check a domain SPF record for syntax problems, soft-fail settings and the 10-lookup limit. Free.
MX record lookup
Look up the MX records for any domain and see who handles its mail. Free, live DNS query, no signup.
Free email address validator
Check syntax, DNS, MX records and deliverability signals for any email address. Free, no signup.
When you need more than a free tool
This page answers what can be determined offline and from public DNS. The API adds live carrier and mailbox verification, a calibrated confidence score, and the full evidence trail behind every verdict.
Credits never expire. Inconclusive verdicts are never billed. Cancel in one call. See pricing or read the docs.