Free tool

Check a domain's DMARC record

Look up any domain's DMARC record and policy instantly, then get a full free website scan covering email security and more.

Passive, read-only check. Private & internal addresses are blocked.
Quick answer

What does a DMARC checker do?

A DMARC checker looks up the _dmarc TXT record for a domain and reports its policy (none, quarantine or reject), reporting addresses and whether it's configured correctly. SiteGuard Monitor's checker shows your DMARC record alongside SPF, SSL, DNS, uptime and security headers in one explainable risk score, so you see your full email-security posture at a glance.

A missing or weak DMARC record leaves a domain wide open to spoofing — attackers can send mail that looks like it came from your client. This free DMARC checker shows the published policy so you know whether the domain is actually protected.

Why DMARC matters for the domains you manage

Without an enforced DMARC policy, anyone can forge your client's domain in phishing and invoice-fraud emails. A policy set to 'none' publishes a record but enforces nothing — a common false sense of security that this checker makes obvious.

  • No DMARC means the domain can be freely spoofed
  • A p=none policy monitors but blocks nothing
  • Spoofed mail damages deliverability and client reputation

What this DMARC checker reports

  • Whether a DMARC record exists
  • The enforcement policy: none, quarantine or reject
  • Aggregate and forensic reporting addresses (rua/ruf)
  • Common misconfigurations flagged in plain language

See the whole email-security picture

DMARC works together with SPF and the email's signing setup. This tool runs a full free scan, so you also see the SPF record, SSL certificate, DNS records, uptime and security headers — combined into a single 0-100 risk score that tells you what to fix first.

From one check to ongoing protection

Add a domain to SiteGuard Monitor and email-security changes are tracked over time. If a DMARC or SPF record is removed or weakened, you get an instant email and Discord alert and it surfaces in the next branded client report.

  • Continuous email-security monitoring across every client
  • Alerts when records change or disappear
  • Email-security status included in monthly reports

Read-only DNS lookups

Checking DMARC is a passive public DNS lookup — exactly what a receiving mail server does. SiteGuard performs no intrusive testing and sends no email; it simply reads the records you've published.

Frequently asked questions

Is this DMARC checker free?
Yes, you can check any domain's DMARC record for free with no account. A free SiteGuard account adds continuous email-security monitoring and alerts when records change.
What's the difference between p=none, quarantine and reject?
p=none monitors but takes no action on failing mail, quarantine sends it to spam, and reject blocks it outright. Reject offers the strongest protection against spoofing, but most domains should reach it gradually after reviewing reports.
Do I need SPF as well as DMARC?
Yes. DMARC relies on SPF and DKIM alignment to decide whether mail is legitimate. A DMARC policy without correctly configured SPF and DKIM won't protect your domain properly.
Why does my domain have no DMARC record?
Many domains were never set up with one. If the checker finds no _dmarc record, mail claiming to be from that domain can't be verified by DMARC and is far easier to spoof.
Does checking DMARC send any email?
No. It's a read-only DNS lookup of your published _dmarc record. No mail is sent and nothing on your domain is changed.
Can SiteGuard alert me if DMARC is removed?
Yes. With a domain added to monitoring, any change to your DMARC or SPF records triggers an email and Discord alert and is reflected in your monthly client report.

More free checks

Turn this one-off check into 24/7 monitoring

Get alerted the moment something changes — and send your clients branded monthly reports automatically.