Email Security Checker
Check if your email is properly protected against spoofing and phishing. We'll test your SPF, DKIM, and DMARC records.
What We Check
Why Email Security Matters
Without protection, anyone can send emails as you
Scammers can send emails that look like they're from your domain, tricking your customers and damaging your reputation.
Your emails might be going to spam
Gmail, Outlook, and other providers check these records. Missing them means your legitimate emails may not reach inboxes.
Proper setup protects you and your recipients
SPF, DKIM, and DMARC work together to verify email authenticity, preventing phishing attacks that target your customers.
Frequently asked questions
What is the difference between SPF, DKIM and DMARC?
SPF lists which mail servers may send for your domain, DKIM adds a cryptographic signature that proves a message was not altered, and DMARC ties the two together and tells receivers what to do when a message fails, plus where to send reports. You need all three for reliable protection.
How do I stop others from spoofing my domain?
Publish an SPF record, sign your mail with DKIM, then publish a DMARC record and move it from p=none to p=quarantine and finally p=reject. At p=reject, receivers refuse mail that fails authentication and alignment, which blocks most spoofing.
Why are my emails going to spam?
Missing or misaligned SPF, DKIM or DMARC is a common cause. Gmail, Yahoo and Microsoft check these records and may filter or reject mail that fails, especially from bulk senders. Fixing authentication and alignment usually improves inbox placement.
What DMARC policy should I use?
Start at p=none to monitor without affecting delivery, review the aggregate reports, then tighten to p=quarantine and p=reject once your legitimate sources pass. p=reject gives the strongest anti-spoofing protection.
What is MTA-STS and do I need it?
MTA-STS tells sending servers to require TLS when delivering to your domain, preventing downgrade attacks on inbound mail. It is recommended for any domain that wants encrypted, tamper-resistant email delivery.
Is this email security check free?
Yes — checking SPF, DKIM, DMARC, MX and SMTP TLS is free and needs no account. An account adds continuous monitoring and alerts when a record changes.