Can criminals send email as you?
Enter your domain and we'll check the three records that stop people sending convincing email in your name: SPF, DKIM and DMARC. It reads public records only and nothing is stored.
Questions
What are SPF, DKIM and DMARC?
Three DNS records that decide whether email claiming to be from your domain is genuine. SPF lists the servers allowed to send your email, DKIM adds a signature to each message, and DMARC tells other mail systems what to do with email that fails those checks.
Is this check safe?
Yes. It only reads public DNS records, the same ones every mail server on the internet reads. Nothing is stored and we don't see your results.
My DMARC policy is p=none. Is that a problem?
It means you're monitoring but not protecting. Spoofed email still gets delivered. The goal is to move to quarantine or reject once you've confirmed all your genuine email passes, which we can do for you.
Why can't you find my DKIM record?
DKIM records sit under a 'selector' name that varies by email provider. We try the common ones. If you use something else, enter its selector in the box. Microsoft 365 uses selector1 and selector2.
Want the full picture?
Email records are one of four checks in our free exposure check, alongside leaked staff passwords and what your business shows to the internet.