DMARC check
Query the _dmarc TXT and read the policy (none/quarantine/reject); if absent, walk up to an ancestor (parent) domain (RFC 9989).
Instructions, guides and related tools
Result
Diagnostic results will appear here
Related checks and services
Planning email for your own domain? Explore Google Workspace features and service terms.
What this check does
Finds v=DMARC1 at _dmarc.{domain}, walking up to an ancestor (parent) domain if absent (RFC 9989), and shows the p=/sp= policy. t=y (test mode) is evaluated one enforcement level lower.
How to read the result
p=none requests no DMARC quarantine or rejection. Verify legitimate sending streams and domain alignment before considering quarantine or reject. The receiver makes the final delivery decision.
Glossary
- p=
- How to handle mail that fails auth: none/quarantine/reject.
FAQ
- Can I jump to reject?
- Safer to ramp: none to monitor, then quarantine, then reject.
Updated:
What to check next
This looks up DNS policy and inheritance. It does not verify a message's authentication/alignment, report delivery, or the action a receiver actually applied.
1. Check alignment with From
At least one of SPF or DKIM must pass with its authenticated domain aligned to the visible From. Having both DNS records does not establish DMARC pass.
2. Check where the policy was found
A subdomain can inherit a policy. Check the discovery domain and p/sp/np to confirm the intended scope. Inheritance alone does not require adding a TXT at the subdomain.
3. Review monitoring before enforcement
Start with p=none and a rua destination you control, then inventory legitimate streams. Fix authentication/alignment before enforcement. Reports to another domain also require authorization from that destination.
4. Account for receiver implementation differences
Policy discovery here follows RFC9989. Receiver adoption can differ. Compare aggregate reports and received-message results after changes instead of inferring delivery from DNS policy alone.
Specifications and review date
Guidance reviewed:
