Inbox Signal
← SPF & DMARC guides

No DMARC record found: what it means

A missing public DMARC policy is worth reviewing, but it is not proof that your email is broken. The safe response starts with understanding every legitimate sender—not pasting in the strictest record.

Plain-English guideAbout 6 minutesNo DNS access required

What “no DMARC record” means

A basic checker looked for a TXT record beginning with v=DMARC1 at the domain’s _dmarc location and did not find one.

That result does not say whether SPF or DKIM works, whether messages reach the inbox, or whether another domain is used for some sending. It identifies one public policy gap.

Keep the result narrow.“Not found” is a reason to investigate. It is not a safe instruction to publish a generic record immediately.

What DMARC adds

DMARC connects SPF and DKIM results to the domain visible in the From address. It also lets a domain owner publish a requested handling policy and, optionally, receive aggregate reports.

p=noneRequests no special delivery action. Commonly used while observing legitimate mail flows.
p=quarantineAsks receivers to treat failing mail as suspicious, which may include spam-folder placement.
p=rejectAsks receivers to reject mail that fails DMARC.

Technical source: IETF RFC 7489.

A cautious rollout sequence

  1. Inventory every sender. Include staff email, newsletters, invoicing, support, forms, CRM tools, and any vendor sending as your domain.
  2. Verify SPF and DKIM. DMARC relies on at least one aligned authentication method passing.
  3. Choose reporting deliberately. Decide who will receive and review aggregate reports before adding a reporting address.
  4. Observe before enforcing. A monitoring policy can reveal legitimate sources that are not aligned.
  5. Tighten only with evidence. Move toward quarantine or reject after legitimate mail is accounted for and tested.

Common mistakes to avoid

  • Publishing p=reject before confirming every real sending service.
  • Assuming an SPF pass automatically satisfies DMARC; the domains must align.
  • Adding a reporting address that nobody monitors.
  • Treating a public presence check as a complete configuration audit.

What to check next

Start by confirming the public baseline, then map the result to your actual mail systems. If SPF is also missing, read the no SPF record guide before designing either record.

Run the free SPF & DMARC check →

Found a gap? Verify before changing anything.

The free check reads public DNS and stores no domain name.

Check a business domain →