If you send bulk mail, yes: Google and Yahoo both require it from bulk senders. For everyone else it is still the main protection against someone spoofing your domain.

Is p=none good enough?

It meets the bulk-sender requirement and is the right place to start, but it stops nothing. Treat it as a monitoring stage on the way to quarantine or reject.

Does a subdomain need its own record?

No. Subdomains inherit the parent's policy, or its sp tag if it sets one. Publish a separate record only if a subdomain needs a different policy.

Does this check DKIM?

No. DKIM records live under a selector that only the sender knows, so they cannot be looked up from the domain alone.

Free tool

DMARC record checker

Enter a domain to see its DMARC policy and whether it actually protects anything. Subdomains are followed up to the parent record they inherit, and each finding says what to change.

What DMARC does

DMARC tells receivers what to do with mail that claims to be from your domain but fails authentication. It requires SPF or DKIM to pass and to align with the visible From address, and it sends you reports showing who is sending as your domain.

What each policy means

The p tag is what matters most, and the usual path is to move through these in order as your reports come back clean.

p=none: monitor only. Spoofed mail is still delivered, but you get reports.
p=quarantine: mail that fails should go to spam.
p=reject: mail that fails should be refused. This is the strongest setting.

What this checker looks for

It reads the record from _dmarc on your domain, or on a parent if the subdomain has none, and flags a missing or invalid policy, more than one record, a missing rua reporting address, and a pct below 100.

FAQ

Frequently asked questions.

Verify your list with 250 free checks Read the API docs

Check your first address in the next minute.

250 free checks every month, forever. Upgrade when you outgrow them.

Get started free Read the API docs

What each policy means

The p tag is what matters most, and the usual path is to move through these in order as your reports come back clean.

p=none: monitor only. Spoofed mail is still delivered, but you get reports.

p=quarantine: mail that fails should go to spam.

p=reject: mail that fails should be refused. This is the strongest setting.

DMARC record checker

What DMARC does

What each policy means

What this checker looks for

Frequently asked questions.

Do I need DMARC?

Is p=none good enough?

Does a subdomain need its own record?

Does this check DKIM?

Check your first address in the next minute.

DMARC record checker

What DMARC does

What each policy means

What this checker looks for

Frequently asked questions.

Do I need DMARC?

Is p=none good enough?

Does a subdomain need its own record?

Does this check DKIM?

Check your first address in the next minute.