How this check works
We query TXT records at _dmarc under the submitted domain, then check the organizational domain when no direct policy is found. We inspect the version, policy, alignment and reporting tags and identify duplicates. We do not inspect actual email or process aggregate reports.
Policy is only part of the picture
DMARC passes when SPF or DKIM passes and the successful domain aligns with the visible From address. Publishing a record does not prove that your actual messages meet that requirement.
Move from visibility to protection
A p=none policy requests reporting without enforcement. Use reports to identify legitimate sources before moving toward quarantine or reject. An enforcing policy without aligned senders can disrupt real mail.
Common questions
Why does my subdomain show an inherited policy?
If no DMARC record exists on the subdomain, the organizational domain's policy may apply. The report shows where the policy was found and which policy applies.
Should I switch straight to p=reject?
First verify all legitimate sending services and their alignment. Review reports, fix unexpected failures, and introduce enforcement in a controlled way.