Look up and check a domain’s DMARC record and policy, free and instant.
Every other tool on this site runs entirely as JavaScript in your browser and never contacts a server at all. This one is a deliberate exception, by necessity: the domain you enter is sent to this site’s server to run the DNS TXT lookup — unavoidable, since browsers can’t query DNS directly — using this server’s own DNS resolution, with no third-party service involved. Nothing about the request is logged, stored, written to a cookie, or shared with any third party — it's handled and discarded the moment the response is sent back to you.
This describes only what this specific tool does with what you type into it. It doesn't cover the rest of this site — see the Privacy Policy for how analytics and advertising cookies are handled elsewhere.
DMARC builds on top of SPF and DKIM: it's a DNS TXT record (published at _dmarc.yourdomain.com, not the domain itself) that tells receiving mail servers what to do when a message claiming to be from your domain fails both of those checks — and optionally, where to send reports about it.
This tool fetches a domain's DMARC record and explains its policy setting: none (monitor only, take no action — the common safe starting point), quarantine (send failing mail to spam), or reject (refuse it outright). It also shows the reporting address if one is configured, and the percentage of mail the policy applies to if less than 100%.
Rolling out DMARC gradually — starting at p=none while watching reports, then tightening to quarantine and eventually reject once you're confident every legitimate sending source is correctly covered by SPF/DKIM — is the standard, low-risk approach. Jumping straight to p=reject before your setup is fully verified can silently block your own legitimate mail.
none takes no action and is used for monitoring while you verify your setup. quarantine sends failing mail to spam. reject refuses it outright. Most domains start at none and tighten gradually as confidence in their SPF/DKIM setup grows.
DMARC is optional — mail can be sent and received normally without it. Its absence just means the domain hasn’t opted into telling receiving servers what to do about spoofed mail, not that anything is broken.
At _dmarc.yourdomain.com, not the bare domain — a subdomain-prefixed TXT record specifically reserved for this purpose, which this tool queries automatically.
Yes — both describe looking up and evaluating a domain’s DMARC record and policy, which is what this tool does.