Free DMARC checker · Instant · No signup
DMARC Checker
Check your DMARC record and policy in seconds. Domain Doctor validates your _dmarc TXT record, reads your enforcement level, and tells you whether you are actually protected against spoofing.
VASTROX HOSTING · EMAIL · DNS · SSL
Want VASTROX to fix every issue above — for you?
Don't fix it alone. Our team configures your SPF, DKIM, DMARC, SSL, DNS and security headers correctly, then hosts you on fast NVMe infrastructure so your domain scores an A and stays there.
- Every failing check fixed and verified
- Hosting, business email, DNS & SSL under one roof
- Free migration from your current provider
What this checks
DMARC (Domain-based Message Authentication, Reporting & Conformance) is the record that tells the world what to do with email that fails SPF and DKIM. Without it — or with only p=none — attackers can send phishing email that looks exactly like it came from you.
Domain Doctor reads your published _dmarc TXT record, checks that there is exactly one, and reports your policy (none, quarantine or reject), your reporting addresses (rua/ruf), your percentage rollout (pct) and alignment mode. Real protection means p=quarantine or p=reject.
Common DMARC Checker errors
- No _dmarc record published at all
- Policy stuck at p=none (monitoring only — not enforcing)
- Two or more DMARC records (invalid — DMARC is ignored entirely)
- rua reporting address missing, so you get no visibility
- pct set below 100 without a plan to reach full enforcement
VASTROX EMAIL SECURITY
Stop spoofers — get enforced DMARC in minutes
Our team publishes SPF, DKIM and DMARC correctly and walks you safely from monitoring to p=reject, so no legitimate mail ever breaks.
- Full SPF + DKIM + DMARC set up and aligned
- Safe rollout to enforcement with report monitoring
- Ongoing DMARC report analysis included
Trusted by businesses for hosting, VPS, business email & game servers · Free migration · Real support
Frequently asked questions
What is a good DMARC policy?
p=reject offers the strongest protection, followed by p=quarantine. p=none only monitors and provides no spoofing protection. Move to quarantine or reject once your SPF and DKIM are aligned.
Why does DMARC say "no protection" if I have a record?
A DMARC record with p=none does not enforce anything — it only collects reports. You are protected only at p=quarantine or p=reject.
Where does the DMARC record go?
It is a TXT record at _dmarc.yourdomain.com, for example: v=DMARC1; p=reject; rua=mailto:dmarc@yourdomain.com.
Can I have more than one DMARC record?
No. If two or more _dmarc TXT records exist, receivers treat DMARC as absent. Keep exactly one.