Free checks for your website, domain and email
Free email security checker: SPF and DMARC
Enter your domain to read its SPF and DMARC records from public DNS and see whether receiving mail servers can tell your real email from forgeries.
What this checker looks at
The domain’s SPF record, which lists the servers allowed to send its email, and its DMARC record, which tells receiving servers what to do with mail that fails those checks and where to send reports.
What a failing result means
Without SPF, receiving servers have no list of your allowed senders. Without DMARC, they have no instruction for mail that fails, so forged email using your domain can reach inboxes and your own mail is more likely to land in spam.
How to fix it
Publish an SPF record listing every service that sends for you, ending in ~all or -all, then a DMARC record starting at p=none with a reporting address. Once the reports show only your own senders, move to p=quarantine and then p=reject.
Questions people ask
- Does this check DKIM?
- DKIM keys sit under a selector name that only your mail provider knows, so they are not visible from the domain alone. Your provider’s admin page shows whether DKIM signing is on.
- Why is my email going to spam?
- Missing or failing SPF and DMARC are the most common cause. The guide below walks through the rest.
Keep it checked, free
Xovris re-reads your SPF and DMARC every 5 minutes and tells you the moment either one changes or stops protecting your mail.
Xovris opens at launch – join early access and your site is the first thing it checks.