Email Tools
DMARC Checker
Check whether a domain has a DMARC policy configured.
Enter a domain to check its DMARC policy.
JustChecker tracks your email authentication records continuously.
Frequently Asked Questions
DMARC builds on top of both - it requires that a message pass SPF or DKIM (and that the passing result is properly "aligned" with the visible From address), then tells receiving servers exactly what to do (nothing, quarantine, or reject) when a message fails.
"none" only monitors and reports without affecting delivery; "quarantine" asks receiving servers to send failing mail to spam; "reject" asks them to block it outright - most domains start at "none" to gather data before tightening to a stricter policy.
DMARC reports reveal ANY email claiming to be from your domain, including unauthorized senders (spoofing/phishing attempts) - even a domain that only sends transactional email benefits from knowing if it's being impersonated.
DMARC requires at least one of SPF or DKIM to be properly configured and aligned to have any effect - publishing a DMARC record alone, with neither underlying mechanism in place, provides no real protection.
Yes - if your own legitimate sending services aren't yet properly aligned with SPF/DKIM, a strict reject policy can cause your own genuine email to be rejected; the recommended path is none → quarantine → reject, monitoring reports at each stage.
It means the domain in the visible "From" address must match (exactly or by matching organizational domain, depending on the "strict" or "relaxed" mode configured) the domain that SPF or DKIM actually authenticated - a mismatch fails DMARC even if SPF/DKIM individually passed.