Free tool
DMARC checker: who can pretend to be you?
Enter your domain to read its DMARC record, its policy and where reports go, with what to do next.
Your domain is sent to Cloudflare's public DNS service (or Google's if that fails) to read its public records. Siela doesn't see or keep it.
The short answer
DMARC is a DNS record that tells receivers what to do with email that fails SPF and DKIM checks for your domain, and where to send reports about it. The policy can be none (just report), quarantine (send to spam) or reject (refuse). Google and Yahoo require at least p=none from bulk senders.
A safe way to roll it out
- Start with p=none and a report address:
v=DMARC1; p=none; rua=mailto:[email protected]. - Read the reports for a few weeks. Make sure each tool that sends as you passes SPF or DKIM.
- Move to p=quarantine, then to p=reject once everything real is passing.
Jumping straight to reject can block your own invoices or newsletters if a tool isn't set up properly.
How it fits together
DMARC only works on top of SPF and DKIM, so check those first. Our glossary explains how the three fit together.
Questions
What is a DMARC record?
A TXT record at _dmarc.yourdomain.com that tells receivers what to do with mail failing SPF and DKIM, and where to send reports.
What does p=none mean?
Receivers take no special action and just send reports. It's the right place to start, but it doesn't stop anyone spoofing your domain.
Do I need DMARC?
If you send to Gmail or Yahoo in bulk, yes, it's required. For a smaller sender, it's still simple to add and helps protect your domain.
Which policy should I use?
Start with none, then move to quarantine and reject once your reports show that all your real mail passes.
More free tools
Find the people worth writing to.
Lead Finder looks for people with a reason to buy, then starts the conversation on LinkedIn, X and email from your own accounts.