Check your domain's email authentication in 10 seconds
Enter your domain. We look up your SPF, DKIM and DMARC records, grade them from A to F, and tell you in plain English what is wrong and how to fix it. Free, no signup.
What we check
SPF
SPF is a DNS record listing the servers allowed to send email for your domain. We check that you have exactly one, that it ends with ~all or -all, and that it stays under the 10-lookup limit.
DKIM
DKIM signs each email so receivers can tell it really came from you and was not changed. We probe dozens of common selectors and flag missing, weak or revoked keys.
DMARC
DMARC tells receivers what to do with mail that fails SPF and DKIM, and sends you reports about who uses your domain. We check the policy, reporting address and alignment settings.
Why it matters
- Spoofing: without these records, anyone can send email that looks like it came from your domain, which is how most invoice and password phishing works.
- Deliverability: mailbox providers use them to decide between the inbox and the spam folder.
- Gmail and Yahoo rules: since February 2024, bulk senders must have SPF, DKIM and DMARC, and unauthenticated mail from everyone else is more likely to be filtered.
How grading works
Every domain starts at 100 points. Each problem we find takes points off, with bigger penalties for missing records and serious risks.
| Grade | Score | What it means |
|---|---|---|
| A | 90 to 100 | Well protected. Spoofed mail is rejected and you get reports. |
| B | 80 to 89 | Good, with small gaps such as a soft policy on subdomains. |
| C | 65 to 79 | Records exist but do not yet stop spoofing, often DMARC at p=none. |
| D | 50 to 64 | Important pieces missing or broken. |
| F | Below 50 | Little or no protection. Anyone can send as your domain. |
What you get for free vs the $49 fix-pack
| Free check | $49 fix-pack | |
|---|---|---|
| Grade and score | Yes | Yes |
| Every problem explained in plain English | Yes | Yes |
| Corrected SPF record, ready to paste | No | Yes |
| DKIM setup steps for your providers | No | Yes |
| DMARC rollout plan with exact records for each phase | No | Yes |
| Instructions for Cloudflare, GoDaddy, Namecheap and others | No | Yes |
| Copy-paste DNS table | No | Yes |
Fix-pack coming soon
The $49 fix-pack — corrected SPF, DKIM steps for your providers and a DMARC rollout plan — is coming soon.