Recommended DMARC rollout
Start with p=none and rua reporting to collect data. After SPF and DKIM pass consistently, move to quarantine, then reject. The Mail Tester flags weak DMARC policies.
DMARC checker — validate your anti-spoofing policy.
Look up the _dmarc TXT record for any domain. DMARC tells mailbox providers what to do when SPF or DKIM fail — critical for deliverability and brand protection.
What is DMARC?
DMARC (Domain-based Message Authentication, Reporting & Conformance) builds on SPF and DKIM. The policy in your _dmarc record can be p=none (monitor), p=quarantine, or p=reject (strictest).
Where is the DMARC record?
Published at _dmarc.yourdomain.com as a TXT record. This tool queries that hostname automatically.