Defaults.Exposed › Stats › Email authentication (SPF, DKIM, DMARC)
What percent of .com domains have DMARC?
September 2026 census edition
As of September 5, 2026, 23.3% of the 151 million graded .com domains publish a DMARC (Domain-based Message Authentication, Reporting and Conformance) record: 35,239,497 domains. Only 11.0% of .com domains enforce it (p=quarantine or p=reject); 76.7% have no DMARC record at all.
Scoped to the .com zone as measured by the census. Aggregate figures only: no individual domain is named or graded.
How this number is measured
It comes from the per-check pass, which runs every graded domain through the full check battery and records a pass, a fail or an undetermined result for each check independently. Every domain in the census is measured directly and counted once.
Reported separately from the global DMARC figure because .com is large enough to dominate it. Many .com domains publish a DMARC record at p=none, which asks receivers to deliver forged mail as normal.
The denominator under that share is 151 million: the population where this particular check had something to read. A domain the census could not decide on is recorded as undetermined and left out of it, never counted as a failure.
It moves when domain owners publish, correct or remove the DNS (Domain Name System) records that authenticate their mail. Every one of those records is free and takes minutes to publish, and together they decide whether someone else can send mail as the domain. The number is recomputed from the raw evidence at every edition. What it cannot tell you is where one particular domain stands: for that, see fix your email authentication.
the full grading methodology · the underlying dataset, published open with the counts behind every percentage. If a figure here disagrees with one elsewhere on the site, the dataset is canonical and we would like to know.
Cite this
Please cite Defaults.Exposed and link this page. The citation below carries the date.
Defaults.Exposed, "What percent of .com domains have DMARC?" (as of September 5, 2026). https://defaults.exposed/stats/what-percent-of-com-domains-have-dmarc
Permalink: https://defaults.exposed/stats/what-percent-of-com-domains-have-dmarc · Machine-readable: /stats/s/com-dmarc.json · Licence: open data
Methodology: how we grade the internet · Source data: census data and downloads. Updated with each census edition.