# Free DMARC, SPF and DKIM check, and DMARC fixed for you

Canonical URL: https://dmarcdone.com/

Free SPF, DKIM and DMARC check

## Check your DMARC free. Let us finish it for you.

See in seconds whether anyone can send email pretending to be you, and get the exact records for your email provider. Or let us move your domain safely to p=reject. One price, no subscription.

Free. No signup. We do not store the domains you check.

- Full refund if we do not reach p=reject in 60 days, under our [refund conditions](https://dmarcdone.com/legal/refunds)
- No passwords or DNS access needed
- $199 once per domain

Sample result

`yourcompany.com`

Email: Microsoft 365 DNS: GoDaddy

DMARC policy: p=none

SPF

Pass

DKIM

1 of 2

DMARC

p=none

Replace Type `TXT` Host / Name `_dmarc`

`v=DMARC1; p=quarantine; rua=mailto:r7k2m9x4qz@dmarcdone.com; fo=1`

Next step unlocked: every real sender passes

The free check

### Not just pass or fail. The exact fix for your setup.

Most checkers stop at a red cross. We detect your email provider and your DNS host, then show the records to paste and where to paste them.

#### SPF, DKIM, DMARC and BIMI

Lookup limits, weak keys, missing reports, policies that only watch. Each finding explained in one plain sentence.

#### Your provider, detected

[Microsoft 365](https://dmarcdone.com/guides/microsoft-365), [Google Workspace](https://dmarcdone.com/guides/google-workspace), [Zoho Mail](https://dmarcdone.com/guides/zoho-mail), [GoDaddy](https://dmarcdone.com/guides/godaddy), [IONOS](https://dmarcdone.com/guides/ionos), [STRATO](https://dmarcdone.com/guides/strato) and [other email providers](https://dmarcdone.com/guides). The records you get are written for your provider.

#### Copy, paste, check again

One-click copy for every record and a guide for your DNS host. Re-run the check to confirm the change is live.

Why it matters

### p=none means anyone can still send email as you

A DMARC record at p=none only collects data. Receivers deliver fake email from your domain as normal until the policy says quarantine or reject.

#### Mailbox providers expect it

Google and Yahoo have required SPF, DKIM and DMARC from bulk senders since February 2024, and Microsoft followed for Outlook.com in 2025.

[Google sender guidelines](https://support.google.com/mail/answer/81126)

#### Spoofing is cheap

Fake invoices and payment-change requests sent from a lookalike of your exact address are the classic business email compromise. Enforcement stops the exact-domain version.

#### Scanners and insurers flag it

"[DMARC policy not enabled](https://dmarcdone.com/blog/dmarc-policy-not-enabled)" shows up in security scans, supplier questionnaires and cyber insurance forms.

Done for you

### From p=none to p=reject without losing real email

Day 0

#### 1. Check and order

Run the free check. If you want it done for you, pay once. No call, no onboarding meeting.

Day 0

#### 2. Publish one record

We give you one DMARC record for your domain. Pasting it takes about 10 minutes. We confirm it went live.

Days 1 to 14

#### 3. We read your reports

Mailbox providers send daily reports. We turn them into a list of every service that sends email as you, with what each one needs fixed.

Day 14 onward

#### 4. Quarantine, then reject

When every real sender passes, we give you the next record. Fakes go to spam, then get blocked. Your real email keeps flowing.

Until day 60

#### 5. Watch and proof

Daily checks and an alert if a real sender starts failing. You get a proof page showing your domain at p=reject.

[See the full process and the safety rules we follow](https://dmarcdone.com/how-it-works), or read [why quarantine comes before reject](https://dmarcdone.com/blog/dmarc-quarantine-vs-reject).

Pricing

### One payment. Done.

Monitoring tools charge every month and leave the work to you. We do the work once and hand you a protected domain.

| Option                | Cost                     | Who does the work    |
| --------------------- | ------------------------ | -------------------- |
| Free checker          | $0                       | You, without reports |
| DMARC monitoring tool | about $17 to $41 a month | You, every month     |
| DMARC Done            | $199 once                | Us                   |

Tool prices from public pricing pages of DMARCwise, DMARC Advisor and EasyDMARC, annual billing, checked 5 October 2026, converted to US dollars at the ECB reference rate of 6 October 2026.

#### Fix to p=reject

Per domain

$199 one-time

Prices in US dollars.

- Sender audit from your real DMARC reports
- Exact SPF, DKIM and DMARC records for each step
- Staged move from p=none to p=reject
- 60-day watch with alerts
- Proof page for insurers and customers
- Full refund if we do not reach p=reject in 60 days, under our [refund conditions](https://dmarcdone.com/legal/refunds)

Questions

### What people ask before they order

Something else? Email [hello@dmarcdone.com](mailto:hello@dmarcdone.com). A person answers.

**Will this break my email?**

Not if it is done in the right order, which is the whole point of the service. We start with a policy that only watches (p=none), read the daily reports until every service that sends email for you passes, and only then move to quarantine and reject. If a real sender starts failing during the watch period, we email you before it becomes a problem.

**Do you need my DNS or email password?**

No. We never ask for logins. We give you the exact records to paste, with step-by-step instructions for your provider. You, or whoever manages your domain, add them. We verify every change automatically.

**How long does it take?**

Publishing the first record takes about 10 minutes. Then we watch at least 14 days of reports to see everyone who sends email as you, and keep quarantine for at least 7 days before reject. So the fastest safe path is about 3 weeks. Domains with many sending services take longer, which is why the guarantee gives us 60 days.

**What if you cannot get my domain to p=reject?**

You can ask for a full refund. If we do not reach p=reject within 60 days of purchase, and you published each record we recommended within 7 days, we refund the full amount you paid, including the BIMI-ready add-on if you bought it.

**Is this a subscription?**

No. One payment per domain. It includes the setup, the guided move to p=reject, and a 60-day watch with alerts. After that the records keep protecting you on their own.

**I use Microsoft 365, Google Workspace, Mailchimp, a CRM and an invoicing tool. Is that a problem?**

That is the normal case. The reports show every service sending as your domain. We tell you which ones need SPF or DKIM fixed and give you the exact steps for each.

**Do I get an invoice?**

Yes. Stripe issues an invoice automatically. You can add your company name and VAT number at checkout.

**What do you store?**

Free checks are not stored. For customers we store your email address, your order, and the aggregate DMARC reports for your domain. Those reports list sending server IP addresses and message counts, never message content.

### See where your domain stands

Free. No signup. We do not store the domains you check.
