HOW SECURE IS
YOUR EMAIL DOMAIN?
Enter your domain. In a few seconds you see SPF, DMARC and DKIM status, gaps in detail, and what would realistically improve. No signup, no email wall.
SPF, DKIM, DMARC — why these three records matter
The check inspects your domain's DNS records for the three standards that secure email senders: SPF (which servers may send on your behalf), DKIM (cryptographic signature of your mails) and DMARC (what receivers should do with mails that fail both checks).
Without these records, two things happen: your legitimate mail lands in spam more often — Google and Microsoft have been tightening requirements since 2024 — and third parties can send phishing mails in your name without receivers being able to detect it technically. Both cost trust and, eventually, business.
Setup is not a big project: three DNS records, configured properly once. The check shows you which records are missing or broken and what the recommendation looks like.
Frequently asked questions
I only send through one provider — do I still need this?
Yes. Without SPF/DKIM/DMARC, any server can send mail using your sender address. The records protect your domain — regardless of what you send through yourself.
What is a sensible DMARC policy?
Start with p=none (reports only), review the reports for a few weeks, then tighten to quarantine or reject. That way you block nothing legitimate before the configuration is verified.
Why does my mail still hit spam despite correct records?
Authentication is the foundation, not the whole story: sending IP reputation, content, volume and recipient reactions also matter. Correct records are still the prerequisite without which the rest doesn't work.