Check Email Security
Enter your domain name to analyze SPF, DKIM, and DMARC records
Get the full WebScore report
This free tool checks your email authentication once. Get a complete security audit with header analysis, DNSSEC validation, and SSL checks for $3, or subscribe from $9/mo for ongoing monitoring and alerts.
Scan free, no credit card required. Unlock full reports from $3 each or subscribe from $9/mo.
What This Tool Checks
Our email security checker validates the three DNS-based authentication protocols that protect your domain from email spoofing and phishing attacks. Enter your domain and get instant results.
SPF (Sender Policy Framework)
Verifies which mail servers are authorized to send email from your domain. A missing or misconfigured SPF record means anyone can send email pretending to be you.
DKIM (DomainKeys Identified Mail)
Checks for a cryptographic signature that proves emails weren't tampered with in transit. DKIM ensures the email content your recipient reads is exactly what you sent.
DMARC (Domain-based Message Authentication)
Validates your policy for handling emails that fail SPF/DKIM. DMARC tells receiving servers whether to accept, quarantine, or reject unauthenticated emails.
SPF vs DKIM vs DMARC: What's the Difference?
SPF controls who can send email from your domain (authorized servers). DKIM verifies that email content wasn't altered in transit (integrity). DMARC tells receiving servers what to do when emails fail SPF or DKIM checks (policy enforcement).
You need all three working together. SPF without DMARC means failures go unreported. DKIM without DMARC means tampered emails might still be delivered. DMARC without SPF and DKIM has nothing to enforce. The combination creates a complete defense against email spoofing.
Why Email Authentication Matters
- Prevent phishing — Without email authentication, attackers can send emails that appear to come from your domain. This is used for phishing attacks targeting your customers, employees, and partners.
- Improve deliverability — Gmail, Outlook, and Yahoo now require SPF and DKIM for bulk senders. Without them, your legitimate emails may land in spam or be rejected entirely.
- Protect brand reputation — When someone receives a phishing email from "your" domain, they lose trust in your brand — even though you didn't send it.
- Compliance requirements — DMARC is increasingly required for regulatory compliance, government contracts, and industry standards.
Need to Set Up Email Authentication?
If this checker found missing records, use our Email DNS Record Generator to build the correct SPF, DKIM, and DMARC records for your domain. For a deeper guide on implementation, read our complete SPF, DKIM, and DMARC guide.