DMARC Lookup
Check a domain's DMARC policy.
With the DMARC lookup tool you can instantly check any domain's DMARC (Domain-based Message Authentication, Reporting and Conformance) policy. Based on the SPF and DKIM results, DMARC tells the receiving mail server what to do with messages that fail authentication. A correctly configured DMARC record takes your domain's email security to the highest level.
For DMARC to work, your SPF and DKIM records must be correct as well; check them with the SPF lookup and the DKIM lookup. If you send bulk or automated email in your domain's name, our SMTP Gateway and bulk mail server solutions come with SPF and DKIM support.
About DMARC
Learn about the email authentication policy.
What Is DMARC?
Sets a policy based on SPF and DKIM results
Stopping Forgery
Blocks unauthenticated email
Reporting
Receive email authentication reports
Frequently asked questions
Common questions about DMARC records and email security.
What is DMARC?
DMARC (Domain-based Message Authentication, Reporting and Conformance) is a DNS policy that tells mail servers what to do with messages that fail authentication. It evaluates the SPF and DKIM results to block forged email.
What does DMARC do?
DMARC stops forged messages that imitate your or your company's domain from reaching recipients. Unauthenticated messages can be rejected, quarantined or reported.
What are the DMARC policy options?
none: reporting only, nothing is blocked. quarantine: messages that fail are sent to spam/quarantine. reject: messages that fail are rejected outright. Start with “none” to monitor, then move to “reject” step by step.
How do I create a DMARC record?
Add a TXT record at _dmarc.example.com in your DNS management panel. Example: v=DMARC1; p=quarantine; rua=mailto:dmarc@example.com
Should SPF, DKIM and DMARC be used together?
Yes. SPF lists the authorised servers, DKIM signs the message digitally and DMARC applies a policy based on their results. Together they give the strongest email security.
What are DMARC reports for?
DMARC reports show which servers send email in your domain's name and how those messages fared in authentication, so you can spot unauthorised sending.
Is my domain protected while the DMARC policy is “none”?
No, “none” is monitoring only: messages that fail authentication are still delivered. Once the reports show that all of your legitimate senders pass SPF and DKIM, moving to a “quarantine” or “reject” policy actually protects your domain.
Take Your Email Security to the Next Level
Set up SPF, DKIM and DMARC properly with our experts.
