How do I check if my domain has DMARC?
By Ash, Founder, HosteazePublished 2 min read
The short answer
Look up the TXT record at _dmarc.yourdomain.com. The quickest way is the free Google Admin Toolbox Dig tool. Enter _dmarc followed by your domain, choose TXT, and look for a value starting v=DMARC1. If nothing comes back, your domain has no DMARC record and you should add one.
You don't need any special software or a login to check DMARC. A DMARC record is public, because receiving mail servers need to read it, so anyone can look up yours in under a minute. Here are three ways, from easiest to most technical.
Method 1: Use a free online lookup
- Open the Google Admin Toolbox Dig tool.
- In the name box, type
_dmarc.followed by your domain, for example_dmarc.yourdomain.co.uk. - Click TXT.
- Look for a line starting
v=DMARC1.
Here's what we got when we looked up Google's own record in October 2026:
_dmarc.google.com. TXT "v=DMARC1; p=reject; rua=mailto:mailauth-reports@google.com"Method 2: Use your computer's command line
On Windows, open Command Prompt. On a Mac, open Terminal. Then type:
nslookup -type=TXT _dmarc.yourdomain.co.ukOn a Mac or Linux you can also use dig TXT _dmarc.yourdomain.co.uk +short, which gives a tidier answer. If the result includes v=DMARC1, you have a record.
Method 3: Check a real email
- Send an email from your domain to a Gmail address.
- Open it, click the three dots and choose Show original.
- Look for the DMARC line near the top.
PASSmeans you have a record and the email passed it.
This is the most useful check, because it tells you whether DMARC is working, not just whether the record exists.
What does my result mean?
| What you see | What it means | What to do |
|---|---|---|
| Nothing, or "no records found" | No DMARC record | Add one, starting with p=none. |
v=DMARC1; p=none | Monitoring only | Fine to start. Read the reports, then tighten it. |
v=DMARC1; p=quarantine | Failing email goes to spam | Check reports before moving to reject. |
v=DMARC1; p=reject | Failing email is blocked | Full protection. Keep an eye on reports. |
Two v=DMARC1 records | Both are ignored | Delete one, so only one remains. |
Not sure which policy is right for you? See DMARC p=none vs quarantine vs reject, and what a DMARC record is for what each tag means.
I don't have one. What next?
Add one, but check SPF and DKIM first. A DMARC record only works if your email passes at least one of them. The full order is in how to set up SPF, DKIM and DMARC.
Frequently asked questions
Why does my DMARC check say "no record found" when I've just added one?
DNS changes can take time to appear. Wait an hour and try again. If it still fails, check the record's host is _dmarc and not _dmarc.yourdomain.com typed into a panel that adds the domain automatically.
Do I need a DMARC record for each subdomain?
No. Subdomains follow the main domain's DMARC policy unless you give them their own record or set the sp= tag.
Can I have two DMARC records?
No. If there are two TXT records starting v=DMARC1 at _dmarc, receivers ignore both, as if you had none.
