Email security check
Can someone send email as you? Find out in ten seconds.
Enter your domain. We read its public DNS records, SPF, DKIM and DMARC, and tell you in plain English what each one means. Nothing is stored.
What the three records do
Three DNS records decide who can send as you.
They’re free, they live in your domain’s DNS, and together they stop most of the email that pretends to be from you.
SPF
A list of the servers allowed to send email for your domain. Mail from anywhere else can be flagged.
DKIM
A signature on every message, so a receiving server can tell it wasn’t altered and really came from you.
DMARC
Your instruction for what to do with mail that fails the other two, and a report of who is sending as you. Only an enforced policy stops spoofing.