Readiness check · Harden lane · weight 6

DMARC policy enforces quarantine or reject

The registrable domain publishes a DMARC record with p=quarantine or p=reject.

Observed on: 39%
Top 1K sites: 61%
Top 1M band: 23%
Not measured: 108

Why it matters

An enforcing DMARC policy helps receiving mail systems reject email that falsely claims to come from your domain, a common route for phishing your customers.

How to fix it

Publish DMARC with p=none and a reporting address first, fix any legitimate senders that fail SPF or DKIM alignment, then move to quarantine and finally reject.

How we check

The registrable domain publishes a DMARC record with p=quarantine or p=reject.

Observed: DMARC set to quarantine or reject.

Not observed: DMARC missing or set to monitor only (p=none).

Limit: Read from public DNS at the time of the check; records may have changed since.

By popularity band

Chrome UX Report band	Observed	Measured
Top 1K	61%	466
Top 5K	49%	2,093
Top 10K	47%	2,533
Top 50K	42%	18,702
Top 100K	40%	5,280
Top 500K	34%	5,361
Top 1M	23%	5,552

Categories most likely to do this

Categories least likely

By stack

By provider

Popular sites where we observed this

Sources and guides

RFC 9989: DMARC

Guide: A Practical Website Health Check for Owners Check your own site