Free tool — instant results
Enter your domain and we'll check your SPF, DKIM and DMARC records in seconds — the three settings that stop someone sending fake emails that look like they're from you.
Runs entirely from your browser to public DNS — we don't store the domain you enter unless you ask us to email you the results.
SPF lists which mail servers are allowed to send email as your domain. Without it, anyone can send an email that claims to be from you. DKIM digitally signs your outgoing mail so receiving servers can confirm it wasn't altered in transit. DMARC tells receiving mail servers what to do with messages that fail those checks — ideally reject or quarantine them, not let them through.
The DKIM check only looks for a handful of common selector names, since there's no single DNS record that lists them. A "not detected" result there is a prompt to double-check with whoever manages your email (Microsoft 365, Google Workspace, or your provider), not a definite fail. SPF, DMARC and MX results are direct DNS lookups and reliable.
These are usually quick, low-cost changes — a couple of DNS records, no downtime. It's exactly the kind of gap we look for as part of the £149 IT & Network Health Check, alongside your network, backups and device security.
Book your health check