DMARC, made understandable
Stop others sending email as your business.
DMARC is the standard that lets you tell the world's mail servers to refuse email that forges your domain. We explain it in plain English and help you reach the one setting that actually stops impersonation: p=reject.
Free, instant, and no sign-up. We read public DNS only.
-
Anyone can forge your address
Plain email has no built-in proof of sender. Without DMARC, a scammer can put your domain in the From line and most inboxes will show it as you.
-
DMARC shuts that down
A DMARC policy at reject tells receiving servers to throw away mail that fails the checks, so a forged invoice never reaches your customer.
-
Plain English, free to check
Every guide skips the jargon, and the checkers are free with no sign-up. They read public DNS only, so you can check any domain, anywhere.
How DMARC protects you
Three steps, in the right order
- 1
Publish a DMARC record
A short line in your DNS turns on reporting and tells receivers you care about your domain.
- 2
Read what your mail is doing
Reports show every source sending as you: your real systems, and anyone forging your name.
- 3
Move to p=reject
Once your legitimate mail passes cleanly, enforce. Forged mail is then refused at the door.
Moving up before your real mail passes cleanly is what blocks legitimate messages. That is why the middle step matters, and why a service pays for itself. See the path to p=reject.
Start here
What is DMARC
Spoofing, SPF, DKIM, alignment and how a policy blocks impersonation. Plain English.
The path to p=reject
The enforcement journey from none to quarantine to reject, and how to move safely.
Why use a DMARC service
Raw XML reports do not scale. See the honest case for getting help, and where we fit.
Free DMARC checker
Check any domain's DMARC, SPF and policy in seconds, with a plain-English verdict.