Free DMARC Checker

Look up and validate the DMARC record on any domain. Confirm your policy is enforced and your domain is protected from spoofing.

DMARC Checker by

Never worry about DNS set up again

With Mailforge and Infraforge all of that will be done for you, no extra effort or payment required. And then you can manage all your sequences in Salesforge.

Other Forges

Explore The Forge Stack

Google & MS365 Infrastructure

Infraforge

Private Email Infrastructure

Mailforge

Distributed Email Infrastructure

Warmforge

Email Deliverability Center

What Is A DMARC Record?
‍

A DMARC checker reads the DMARC record on a domain and confirms it is set up correctly. DMARC, short for Domain-based Message Authentication, Reporting, and Conformance, tells mailbox providers what to do with email that fails SPF or DKIM. It sets a policy of none, quarantine, or reject, aligns your authentication, and can send reports on who is sending mail using your domain. The checker pulls the record, reads the policy, confirms alignment, and flags anything that weakens your protection.
‍

How the DMARC Checker Works
‍

1. Enter your domain: Type the domain you want to check and run the lookup.

‍2. We pull the record: The tool queries DNS and retrieves the live DMARC record.

‍3. We read the policy: It reports your policy level and confirms how it aligns with SPF and DKIM.

‍4. You get the fixes: If the record is missing or weak, you get steps to correct it and tighten enforcement.

Why It Matters?
‍

Decide What Happens to Failing Mail

Without DMARC, providers guess what to do with email that fails authentication. DMARC takes that decision back. Your policy tells them to monitor, quarantine, or reject spoofed mail. The checker confirms your policy is actually set the way you intend.

See Who Is Using Your Domain

DMARC reporting shows you every source sending email as your domain, including spoofers. The checker confirms your reporting is configured so you can see that data instead of flying blind.

Move Safely Toward Enforcement

Jumping straight to a reject policy can block your own legitimate mail. The checker shows your current policy and alignment so you can move from monitoring to enforcement step by step, without cutting off real email.

What is a DMARC record?

A DMARC record is a DNS entry that tells mailbox providers how to handle email failing SPF or DKIM, and where to send reports about it. It ties your authentication together and lets you enforce a policy against spoofed mail.

What do p=none, quarantine, and reject mean?

These are DMARC policy levels. None monitors without acting, quarantine sends failing mail to spam, and reject blocks it. Most domains start at none to gather reports, then move to quarantine and reject as confidence grows.

How do I check my DMARC record?

Enter your domain into the checker and run it. The tool reads DNS, reports your policy level, confirms SPF and DKIM alignment, and flags any errors, along with how to fix them.

Do I need SPF and DKIM before DMARC?

Yes. DMARC relies on SPF and DKIM to decide whether mail is authentic. Set up and verify both first, then add DMARC to enforce a policy on anything that fails.

Is the DMARC checker free?

Yes. Enter your domain, run the check, and get the full result with fixes. No account required.

Why is my DMARC failing even with SPF and DKIM set up?

DMARC needs alignment, not just a pass. If SPF or DKIM validates a different domain than the one in your From address, DMARC still fails. Check that your sending services align the From domain with the authenticated domain.