DMARC Lookup
Look up your domain's DMARC record and analyze your email authentication policy.
DMARC (Domain-based Message Authentication, Reporting & Conformance) is an email authentication protocol built on top of SPF and DKIM. It lets domain owners specify what to do with emails that fail authentication and receive reports about them.
You decide whether emails impersonating your domain should be delivered, quarantined, or rejected outright.
Receiving servers send regular reports on email traffic using your domain, letting you monitor spoofing attempts in real time.
DMARC ties SPF and DKIM results together into a single coherent policy, boosting overall email deliverability.
A DMARC record is added as a DNS TXT record after SPF and DKIM are in place. Complete the setup in three steps below.
At minimum the v and p tags are required. Start in monitoring mode with p=none; tighten the policy after reviewing your reports.
v=DMARC1; p=none; rua=mailto:dmarc@example.com
In your DNS management panel, create a new TXT record. Enter _dmarc in the host field (the domain is appended automatically) and paste your DMARC record as the value.
_dmarc.example.com TXT "v=DMARC1; p=none; ..."
After propagation (5–30 minutes) verify your record with the tool above. If you defined an rua address, aggregate reports will start arriving within a few days.
Key points to keep in mind so your DMARC policy works correctly and your domain stays protected.
DMARC relies on SPF and DKIM validation results. Applying p=reject before both protocols are fully configured can cause legitimate emails to be rejected.
Progress through p=none → p=quarantine → p=reject step by step. Review reports at each stage to confirm legitimate mail isn't affected.
aspf=r and adkim=r (relaxed) allow email sent from subdomains. s (strict) requires an exact domain match — be careful if you use third-party sending services.
It is strongly recommended to set a rua address for aggregate reports. These reports show every sending source using your domain and help you safely tighten your policy over time.
When you switch to Pro ePosta, we set up your DMARC policy correctly on your behalf — your domain is protected against impersonation, with reporting ready to go.
