GLOSSARY

What is DMARC?

DMARC tells receiving servers what to do with email that fails SPF or DKIM, and where to send reports. Learn how DMARC works and look it up free.

Open the DNS lookup →All free tools

DMARC (Domain-based Message Authentication, Reporting and Conformance) is the policy layer on top of SPF and DKIM. It tells receiving servers what to do when a message fails those checks — and asks them to send you reports.

Policy: none, quarantine, reject

A DMARC record (a TXT record at _dmarc.yourdomain.com) sets a policy: p=none just monitors, p=quarantine sends failing mail to spam, and p=reject blocks it outright. Domains usually start at none to observe, then tighten to reject once SPF and DKIM are solid.

Alignment and reports

DMARC also requires "alignment" — the domain in the From header must match the SPF/DKIM domain — which is what actually stops spoofing. The aggregate reports it requests show you who is sending as your domain, revealing both legitimate services and abuse.

Try it now — free, no signup

Use the DNS lookup in your browser. Then, when you need it at scale with an API key and higher limits, grab the full Eveses API.

Open the DNS lookup →Sign up for the full API

FAQ

What DMARC policy should I use?›
Start with p=none to monitor, fix any legitimate senders failing checks, then move to quarantine and finally reject.
Where does the DMARC record live?›
In a TXT record at _dmarc.yourdomain.com. A DNS lookup will show it.

Related

What is an SPF record?An SPF record lists which servers may send email for your domain, fighting spoofing. Learn how SPF works and look yours up free.What is DKIM?DKIM cryptographically signs your outgoing email so receivers can verify it was not altered and really came from your domain. Learn how it works.What is a TXT record?A TXT record holds arbitrary text in DNS, used for domain verification and email policies like SPF and DKIM. Learn how and look one up free.