Authentication

Live DNS check

DMARC Checker

Inspect the _dmarc TXT record and identify policy, alignment and reporting readiness.

Health score--Live DNS check

Signal checklist

The result summarizes DMARC policy, reporting tags and common gaps without collecting report data.

DMARC Checker

Enter a domain to read its DMARC record and understand whether receivers see none, quarantine or reject policy.

Methodology

Result

The result summarizes DMARC policy, reporting tags and common gaps without collecting report data.

Support

Keep this free result available

Use the result first. Support and promotional areas stay separate from the useful result.

  • Useful result first
  • No signup required
  • Promotions kept separate
Choose an amount before the secure payment page opens.

Guide and interpretation

How to use this check

Enter a domain to read its DMARC record and understand whether receivers see none, quarantine or reject policy.

MailHealth reads _dmarc.domain TXT through the same bounded DNS resolver and returns only parsed tag facts.

How to interpret the result

p=none is useful for observation, while quarantine or reject is stronger once SPF/DKIM alignment is ready.

Example

_dmarc.example.com with v=DMARC1; p=reject; rua=mailto:dmarc@example.com tells receivers to reject unauthenticated aligned failures and send aggregate reports.

Common issues and next steps

A domain may publish DMARC with p=none forever, which gives visibility but little protection.

Use reports to fix legitimate senders, then move gradually toward quarantine or reject with a pct rollout.

Methodology and limits

The free check does not collect, parse or store DMARC XML reports; report ingestion belongs in an account feature.

FAQ

Will MailHealth receive my DMARC reports?

No. Report ingestion is an account feature and is not active in the free check.

Is p=reject always safe?

No. Move to enforcement only after legitimate senders pass SPF or DKIM alignment.