Squish/toolsSquish →

DMARC Checker

Check any domain's DMARC, SPF, and DKIM records and see exactly what's missing. A complimentary tool from Squish — no signup.

Try , ,

Why email authentication matters

Three DNS records decide whether your email reaches the inbox and whether scammers can forge your domain: SPF (which servers may send for you), DKIM (a cryptographic signature on your mail), and DMARC (the policy that ties them together). When these are missing or misaligned, your legitimate mail gets flagged as spam and anyone can send email that looks like it came from you.

How to read the result

  • SPF present, ~all or -all: you've declared your senders.
  • DKIM selectors found: your mail is being signed.
  • DMARC p=quarantine or p=reject: spoofed mail is actually being stopped. p=none only monitors.

Common questions

What does a DMARC checker do?

It looks up the DNS records that control whether your email can be spoofed — DMARC, SPF, and DKIM — and reports whether each is present and correctly configured. Gaps in these records are why legitimate mail lands in spam and why scammers can forge your domain.

What's the difference between SPF, DKIM, and DMARC?

SPF lists which servers may send mail for your domain. DKIM cryptographically signs your messages. DMARC ties the two together and tells receivers what to do when a message fails — quarantine, reject, or nothing. You want all three aligned.

My DMARC says p=none — is that bad?

p=none is monitor-only: it reports failures but doesn't stop spoofed mail. It's a fine starting point, but you'll want to move to p=quarantine or p=reject once you've confirmed your legitimate senders pass. Until then, anyone can forge your domain.

Can Squish just handle this for me?

Yes — managed Microsoft 365 email through Squish configures SPF, DKIM, and DMARC automatically when we set up your domain, and we monitor them. That's the point of managed email: you don't hand-edit DNS records.

Don't want to manage this yourself? Managed Microsoft 365 email through Squish configures SPF, DKIM, and DMARC automatically — and keeps them healthy.

See email plans →