DMARC record checker for all your domains
Paste up to 25 domains. We look up _dmarc for each one, read the policy, and give you a copy-ready record where it is missing or weak.
OK Worth fixing Broken Could not tell. Click a row for the records and the fix.
A starter DMARC record
If the check shows no DMARC record, add one TXT record and start with reports only:
_dmarc.example.com. 3600 IN TXT "v=DMARC1; p=none; rua=mailto:postmaster@example.com"
Watch the reports for two weeks. When only your own servers show up, change p=none to p=quarantine. That is the step that actually stops spoofed mail.
DMARC needs SPF or DKIM to pass
DMARC passes only when SPF or DKIM passes and matches the domain in the From address. A DMARC record on top of a broken SPF record just makes receivers reject your own mail, so fix the red SPF and DKIM cells in the table first.
Questions
What is a DMARC record?
A TXT record at _dmarc.yourdomain.com that tells receivers what to do with mail that fails SPF and DKIM: nothing (p=none), spam folder (p=quarantine) or reject (p=reject). It also tells them where to send reports (rua=).
Is p=none good enough?
It is the right first step: you get reports without risk. But p=none does not stop anyone from sending as your domain. After two weeks of clean reports, move to p=quarantine, then p=reject.
Can I check DMARC for many domains at once?
Yes. Paste up to 25 domains, one per line. The DMARC column comes first on this page, and every domain also gets SPF, DKIM, MX and blacklist checks.
My subdomain has no DMARC record. Is that a problem?
Not always. Receivers fall back to the record of the main domain and use its sp= policy, or p= if sp is not set. The checker shows when a policy is inherited.
Do I need a paid DMARC service?
For one or two domains, a free mailbox for reports is enough. With many domains the XML reports pile up; the MXDeck app will parse them into a plain list of who sends as you.
More free tools: Mail health checker · SPF checker · DKIM checker · MX lookup
Run 10, 30 or 100 domains?
MXDeck is a Mac email app with this check built in: one inbox for every contact@, and a red dot the day a domain’s mail breaks.