What is a DMARC record and why is it important?

DMARC (Domain-based Message Authentication, Reporting, and Conformance) is an essential DNS TXT record that tells receiving mail servers (like Gmail, Outlook, and Yahoo) how to handle incoming emails that claim to come from your domain but fail SPF or DKIM authentication checks. Without DMARC, cybercriminals can easily forge your domain name in phishing attacks.

What is the difference between p=none, p=quarantine, and p=reject?

p=none is a monitoring-only policy where failing emails are still delivered to inboxes, but you receive aggregate reports. p=quarantine directs receiving servers to send failing emails straight to spam/junk folders. p=reject is the strongest policy; it instructs receiving servers to completely block and bounce fraudulent emails before they ever reach the recipient.

Why do Google and Yahoo require DMARC in 2026?

To combat the massive surge in email phishing and spam, Google and Yahoo enforce strict sender guidelines requiring all domains sending bulk emails (5,000+ messages per day) to have valid SPF and DKIM authentication, alongside an active DMARC record with a minimum policy of p=none.

How do I add a DMARC record to my domain?

Log into your DNS provider (Cloudflare, GoDaddy, Namecheap, Route 53, etc.), create a new TXT record with Name set to "_dmarc" (or "_dmarc.yourdomain.com"), and paste your policy value, for example: "v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@yourdomain.com; pct=100;".

Does DMARC affect incoming emails or only outgoing emails?

DMARC only applies to outgoing emails sent from your domain. It protects external email recipients from receiving forged messages sent by scammers pretending to be you.

Free Security Tool

Free DMARC Checker & Policy Validator

Inspect your published DMARC policy, SPF record presence, and MX records. Message-level SPF or DKIM alignment and sender compliance require additional checks.

DMARC Policy ReviewInstant DNS TXT AnalysisCopy-Paste Remediation Snippets

Free Security Tool

DMARC & Email Spoofing Checker

Enter a domain to inspect its published DMARC policy, SPF record presence, and MX records. Message-level SPF and DKIM alignment are not tested here.

Why check DMARC today?

As of 2026, major email receivers including Google Workspace and Yahoo Mail reject bulk emails from domains lacking a valid DMARC policy. Protect your sender reputation and brand trust.

Your DMARC analysis will appear here

Enter a domain to inspect its DMARC policy tags, SPF record presence, and MX configuration.

Why DMARC Record Authentication is Crucial

Email was originally created without built-in security. Any sender could easily put someone else’s domain in the “From:” header. DMARC solves this vulnerability by creating a public contract between domain owners and receiving mail servers.

Without DMARC, malicious actors can send believable spoofed invoices, password reset scams, or phishing links using your exact company name, destroying your business reputation and causing your legitimate newsletters to get dumped into spam.

1. SPF

Specifies which server IP addresses and mail providers are authorized to send mail for your domain.

2. DKIM

Adds a cryptographic signature to outgoing messages so receivers can verify the email wasn’t altered in transit.

3. DMARC

Combines SPF and DKIM. Dictates whether failing emails should be allowed, quarantined in spam, or blocked entirely.

DMARC Enforcement Levels Explained

p=none

Monitor Mode

Does not block any emails. It collects daily reports from mail providers so you can verify which legitimate third-party services (HubSpot, Mailchimp, Zendesk) are sending on your behalf before enforcing strict policies.

p=quarantine

Quarantine Mode

Instructs mail servers to route suspicious or unauthenticated emails directly into the recipient’s Spam or Junk folder rather than the primary inbox.

p=reject

Full Rejection (Gold Standard)

The highest security tier. Any message that fails SPF and DKIM checks is immediately rejected at the server gate and never reaches the user at all.

Other Security Tools

AuditYourWeb provides free security testing utilities for webmasters and agencies:

Full Platform

Automate Your Website Compliance

Beyond DNS security, does your website meet ADA & WCAG 2.2 accessibility standards? Find out with our AI-powered site audit.

Scan Your Website Free

Frequently Asked Questions About DMARC

Everything you need to know about setting up and troubleshooting DMARC records.

DMARC (Domain-based Message Authentication, Reporting, and Conformance) is an essential DNS TXT record that instructs receiving mail servers (such as Gmail, Outlook, and Yahoo Mail) how to handle incoming emails that claim to come from your domain but fail SPF or DKIM checks. Without DMARC, cybercriminals and bad actors can easily forge your domain name to execute high-impact phishing attacks and financial fraud against your customers and staff.