// Tool
Email Security Checker
Check MX records, SPF, DKIM, and DMARC for any domain. Get an email security score and see exactly what's missing or misconfigured.
Frequently Asked Questions
What do SPF, DKIM, and DMARC each do?
SPF lists which servers may send mail for the domain. DKIM signs messages so receivers can verify integrity and origin. DMARC ties the two together, tells receivers what to do with mail that fails, and requests reports.
What DMARC policy should I start with?
Begin with p=none plus a reporting address (rua) to observe without affecting delivery, then move to quarantine and finally reject once all legitimate sources are aligned.
My SPF passes but DMARC fails — why?
DMARC requires alignment: the SPF or DKIM domain must match the From: domain. Mail sent through third parties can pass raw SPF yet fail alignment, which fails DMARC.
