Free tool

Check your email
security in seconds.

A quick, public check of your domain's SPF and DMARC records, the settings that stop someone else sending email that looks like it came from you. Type a domain below, no sign-up, no email address needed.

Why this matters

Your domain can be spoofed without you knowing

SPF, DKIM and DMARC are the three DNS records that tell other mail servers whether an email really came from your domain. Without them set up correctly, someone can send an email that appears to be from your business, to your own clients, and there's nothing stopping it.

DMARC has also become a practical delivery problem, not just a security one. Google and Yahoo now expect it before they'll reliably deliver your mail, so a missing or weak record can mean invoices and marketing emails quietly landing in spam.

Worth knowing

DMARC done wrong can break your email

Jumping straight to a strict DMARC policy without checking what it would block first can silently stop legitimate email, invoices, newsletters, anything sent through a third-party tool, from ever arriving. A proper rollout monitors first, then tightens gradually. That's the part a five-minute DNS check can't tell you.

Get in touch

Want the full picture?

Tell me about your business and what's prompted the enquiry. I'll reply within one working day.