Email security

Email authentication

MX routing plus SPF, DKIM and DMARC records with their published values. Free, no signup, 5 checks a day.

Tip

You can open any section directly with a domain in the URL query string, then share that result page with someone else.

5 free checks a day. No signup, no key.

Examples
Notes

How to read this result

These notes explain what the check is showing, where the data comes from and what the main blind spots are.

01

MX — where mail is routed

The MX records name the servers that accept mail for the domain, in priority order. A missing MX is why mail to the domain quietly fails with no error anyone sees.

02

SPF

Lists the servers allowed to send mail as the domain. A receiving server checks it before deciding whether the envelope sender is plausible. It does not stop anyone from writing your name in the visible From line — that is DMARC's job.

03

DKIM

Signs outgoing mail with a key published in DNS. The selector is chosen by the sender and listed nowhere a checker can enumerate, so not finding one does not prove the domain signs nothing.

04

DMARC

Tells receivers what to do when SPF and DKIM disagree with the From address, and where to send the reports. Without it, a failed check is advisory and nothing acts on it.