Free DMARC checker · Instant · No signup
DMARC Checker
Check your DMARC record and policy in seconds. Domain Doctor validates your _dmarc TXT record, reads your enforcement level, and tells you whether you are actually protected against spoofing.
VASTROX Hosting, Email, DNS & SSL
Let VASTROX fix everything above for you
You do not have to fix this alone. Our team sets up your SPF, DKIM, DMARC, SSL, DNS and security headers correctly, then hosts you on fast NVMe infrastructure so your domain scores an A and stays there.
- Every failing check fixed and verified
- Hosting, business email, DNS and SSL in one place
- Free migration from your current provider
What the DMARC Checker checks
DMARC (Domain-based Message Authentication, Reporting & Conformance) is the record that tells the world what to do with email that fails SPF and DKIM. Without it, or with only p=none, attackers can send phishing email that looks exactly like it came from you.
Domain Doctor reads your published _dmarc TXT record, checks that there is exactly one, and reports your policy (none, quarantine or reject), your reporting addresses (rua/ruf), your percentage rollout (pct) and alignment mode. Real protection means p=quarantine or p=reject.
Check your domain in three steps
Common DMARC Checker problems
- No _dmarc record published at all
- Policy stuck at p=none (monitoring only, not enforcing)
- Two or more DMARC records, which makes DMARC invalid and ignored
- rua reporting address missing, so you get no visibility
- pct set below 100 without a plan to reach full enforcement
VASTROX Email Security
Stop spoofers with enforced DMARC
Our team publishes your SPF, DKIM and DMARC correctly, then moves you safely from monitoring to enforcement so no real mail ever breaks.
- Full SPF, DKIM and DMARC set up and aligned
- Safe rollout to enforcement with report monitoring
- Ongoing DMARC report analysis
Hosting, VPS, business email and game servers. Free migration. Real support.
Frequently asked
What is a good DMARC policy?
p=reject offers the strongest protection, followed by p=quarantine. p=none only monitors and provides no spoofing protection. Move to quarantine or reject once your SPF and DKIM are aligned.
Why does DMARC say "no protection" if I have a record?
A DMARC record with p=none does not enforce anything; it only collects reports. You are protected only at p=quarantine or p=reject.
Where does the DMARC record go?
It is a TXT record at _dmarc.yourdomain.com, for example: v=DMARC1; p=reject; rua=mailto:dmarc@yourdomain.com.
Can I have more than one DMARC record?
No. If two or more _dmarc TXT records exist, receivers treat DMARC as absent. Keep exactly one.