Free tool
Email security check
Check whether a domain is protected against people sending email in its name. You get its SPF, DKIM and DMARC setup in plain language, and the exact records to add for anything missing.
The lookups go from your browser to Cloudflare's public DNS. Nothing is sent to this site or saved. How it works
What it checks
- SPF
- The list of servers allowed to send email as your domain.
- DKIM
- A signature on each email that proves it came from you and was not changed.
- DMARC
- Tells receivers what to do with mail that fails SPF and DKIM, and sends you reports.
- Extras
- Encrypted delivery (MTA-STS and TLS-RPT), DNSSEC and BIMI. Nice to have, not urgent.
I set up email for small businesses in Toronto, and these are the first things I look at. Want a hand fixing what it finds? Email me.