Defaults.Exposed › Stats › Email authentication (SPF, DKIM, DMARC)
What percent of domains fail DMARC?
As of August 16, 2026 · census snapshot 2026-08-16
As of August 16, 2026, 90.7% of the 377 million domains graded in the Defaults.Exposed census fail the DMARC check — 341,945,132 domains with no enforcing DMARC policy. That includes 80.0% with no DMARC record at all and 10.8% stuck at p=none, which monitors but blocks nothing.
"Fail" here means the domain does not enforce DMARC (no record, an invalid record, or p=none). Enforcement (p=quarantine or p=reject) is the only setting that instructs receivers to act on spoofed mail.
How this number is measured
It comes from the Defaults.Exposed census — a full pass over the public DNS, mail and TLS configuration of every domain we can resolve, not a sample or a panel. Each domain is checked directly, one result per domain, and a check that cannot be determined is recorded as undetermined rather than counted as a failure. The figure above is recomputed from that raw evidence for every edition, so it moves when the internet moves, not when we re-word the page.
Snapshot 2026-08-16 · the full grading methodology · the underlying dataset, published open with the counts behind every percentage. If a figure here disagrees with one elsewhere on the site, the dataset is canonical and we would like to know.
| Result | Domains | Share |
|---|---|---|
| p=reject (enforcing) | 15,853,952 | 4.2% |
| p=quarantine (enforcing) | 19,129,666 | 5.1% |
| p=none (monitor only) | 40,559,386 | 10.8% |
| DMARC present but invalid | 28,244 | 0.0% |
| No DMARC record | 301,357,502 | 80.0% |
Cite this
Statistic current as of August 16, 2026. Recomputed from the live census each edition; the number on this page and the machine-readable twin always match. Please cite Defaults.Exposed and link this page.
Defaults.Exposed, "What percent of domains fail DMARC?" (as of August 16, 2026). https://defaults.exposed/stats/what-percent-of-domains-fail-dmarc
Permalink:https://defaults.exposed/stats/what-percent-of-domains-fail-dmarc · Machine-readable:/stats/s/dmarc-fail.json · Licence:open data
Methodology: how we grade the internet · Source data: defaults.exposed/data. Updated with each census edition.