Free tool

Can someone send email in your name?

Enter your domain. We check SPF, DKIM, DMARC and mail server settings from the outside, without any access, and show exactly what to fix.

Questions

What is checked?

SPF (which servers may send your email), DKIM (digital signature of your messages), DMARC (what receivers do with fake email and where reports go), MX records, MTA-STS and TLS reporting.

Is it safe?

Yes. We only read public DNS records, the same ones every mail server in the world reads when you send them a message. We need no passwords or access.

Why can DKIM show as missing when it is set up?

The DKIM selector is not public, so we try the common ones (selector1, google, default and others). If your provider uses a custom selector, the check cannot see it.

What grade is good?

A or B. Anything with DMARC missing or set to "none" means fake email in your name is still delivered.