DMARC checker: look up your DMARC record

Look up the published DMARC policy and check whether it is inherited. Review p, sp, np and reporting destinations without sending an email.

No https://, paths or email addresses.

Public records queried through Cloudflare.

Where DMARC is published

Enter the domain visible in the From field. The tool queries _dmarc.domain and, where applicable, looks for an inherited policy using the RFC 9989 DNS tree walk. The result identifies the domain supplying the policy.

What the policy means

p=none requests monitoring without asking for a DMARC-failure action. quarantine requests suspicious treatment; reject requests rejection. sp can define a subdomain policy and np a policy for nonexistent subdomains. rua specifies aggregate report destinations.

This is a documentation example, not a ready-to-copy configuration. Change policy only after identifying legitimate senders and reviewing their reports. The receiving server retains the final decision about each message.

v=DMARC1; p=none; rua=mailto:[email protected]

What this DMARC checker evaluates

The analysis follows RFC 9989, published in May 2026 to replace RFC 7489. It identifies older pct, ri and rf tags as legacy information. Receiver implementations may differ during adoption of the standard.

Finding a record does not prove that your emails pass DMARC. SPF or DKIM must pass with the required alignment. This lookup does not verify DKIM signatures, collect reports or check authorization for external reporting destinations.

Frequently asked questions

Is it free, and do I need an account?

It is free and requires no registration. Check one domain at a time. Usage limits help keep the service available.

Does this change my configuration?

No. It reads public records. It does not request access to your email account or change DNS. The queried name is sent to Cloudflare’s public resolver to obtain the answer.

Technical documentation