Check a domain's DMARC record

See whether a domain enforces DMARC, or whether attackers can spoof it. Free and instant.

Free and anonymous. No account required.

What this checks

This looks up the DMARC TXT record published at _dmarc.<domain> and parses its policy (none, quarantine, reject), subdomain policy, enforcement percentage, and aggregate-reporting addresses.

Why it matters

DMARC is what stops attackers from sending email that looks like it comes from a domain. A missing or 'p=none' policy means spoofing is not blocked, only monitored, which is a common gap in business email compromise.

How the detection works

A live DNS query over DNS-over-HTTPS retrieves the record, then a deterministic parser classifies it as strong, weak, or missing and returns specific recommendations.

FAQ

What is a good DMARC policy?

p=reject (or p=quarantine) with aggregate reporting enabled. p=none only monitors and does not block spoofing.

Is this checking my email?

No. It only reads the domain's public DNS record. Nothing is stored and no account is needed.

Related free checks

Email breach check SPF checker DKIM checker Domain age check Lookalike domain finder WHOIS lookup Meeting link safety check Shared link safety check

Want continuous monitoring?

Connect your inbox and InboxWatch watches for these threats automatically. Free for your first 15 scans.

Connect your inbox