Is your domain protected from spoofing?
Analyze any domain's DMARC record — see the policy, what each tag means, what's wrong,
and the exact steps to reach p=reject and stay compliant with Gmail, Yahoo and Microsoft.
Since 2024, Gmail, Yahoo and Microsoft require bulk senders (5,000+/day) to publish DMARC — non-compliant mail is now permanently rejected. But p=none only watches; real protection needs quarantine then reject.
This tool grades where you are and shows the safe path forward.
Frequently asked questions
What is a DMARC record?
A DMARC record is a DNS TXT record at _dmarc.yourdomain that tells receiving mail servers how to handle messages that fail SPF or DKIM alignment, and where to send aggregate reports. It is the policy layer that makes SPF and DKIM enforceable.
What do p=none, p=quarantine and p=reject mean?
p=none only monitors and takes no action; p=quarantine sends failing mail to spam; p=reject blocks failing mail outright. Reject is the goal for full anti-spoofing protection, reached gradually after confirming your legitimate senders pass.
What is the safe path to p=reject?
Start at p=none and collect aggregate reports, verify SPF and DKIM pass and align for every legitimate sender, move to p=quarantine (optionally with a partial pct), then to p=reject once no legitimate mail is failing.
Do Gmail and Yahoo require DMARC?
Since 2024, Gmail, Yahoo and Microsoft require bulk senders (roughly 5,000+ messages a day) to publish a valid DMARC record. Without one, that mail can be throttled or rejected, so DMARC is now effectively mandatory for senders at scale.
Why is my DMARC failing even though SPF passes?
DMARC requires alignment, not just a pass — the domain that SPF authenticates (or the DKIM d= domain) must match the From-header domain. Mail sent through third parties often passes SPF for their domain but fails DMARC alignment for yours; fix it with a custom return-path or DKIM signing on your own domain.
Is this DMARC checker free?
Yes, parsing and grading your DMARC record is free and needs no account. An account adds ongoing monitoring so you are alerted if the record changes or weakens.