Learn · DMARC

What Is DMARC, and Does My Domain Have It?

DMARC tells the world what to do with email that fails authentication for your domain — reject it, quarantine it, or do nothing. Without an enforcing DMARC policy, anyone can spoof mail as you, which erodes the trust signals search and answer engines read.

What "Good" Looks Like

A published DMARC policy at _dmarc.yourdomain with p=quarantine or p=reject is the enforcing posture. p=none is monitoring only — present, but permissive. No record at all is an honest absence, and we report it as one.

We show the meaning and our disclosed bands — never a secret weight or threshold.

Now check your own site

Run the Real Read.

Live check · runs on your site

Check DMARC (Email-Spoofing Protection) on a Real Domain

Enter a domain and we'll run the real read — and tell you plainly if the signal isn't there or the page can't be reached.

A real, single-signal read through the same machinery the full scan uses. We report what we can measure and label what we can't.