Free tool · Email security check

Can someone send emailpretending to be you?

Check the email security records for any domain and get clear, step-by-step fixes. It takes a few seconds and needs no sign-up.

We log the domain you check to keep this tool working and see which tools are worth building. See our Privacy Policy.

What this check looks at

Who may send

SPF is a list, published in your DNS, of the services allowed to send email for your domain. We also count its DNS lookups, because going over 10 breaks it.

Proof it is real

DKIM adds a signature to each message. Receivers check it against a public key in your DNS to confirm the message was not faked or changed.

What to do with fakes

DMARC tells receivers what to do with mail that fails the other two checks: deliver it, send it to spam, or reject it. It can also send you reports.

Frequently asked questions

What are SPF, DKIM and DMARC?

They are three records in your DNS that help receiving mail servers decide if a message really came from you. SPF lists the services allowed to send for your domain. DKIM adds a signature that proves a message was not changed. DMARC tells receivers what to do when a message fails, and sends you reports.

Why does it say DKIM was not found when I have it set up?

DKIM keys are stored under a selector name chosen by your mail provider, and there is no way to list them. We try the common names, such as google, selector1, selector2, k1 and default. If your provider uses a different name, enter it in the selector box and check again. A missing result means we did not find a key, not that DKIM is off.

How long until DNS changes show up?

Often within minutes, but it can take up to the TTL (time to live) of the old record, which is commonly one hour and sometimes 24 hours. Different resolvers cache answers for different lengths of time. If a change does not show up after a day, check that you edited the right record at the right DNS provider.

More free tools

Want to hear about changes as they happen?

Domain Lab monitors registration status, DNS, and SSL continuously, so you hear about the change, not the aftermath. Free for your first domain.

Start monitoring free