Skip to main content
7 Email Security Checks

Free SPF, DKIM & DMARC Checker

Verify your domain's email authentication setup. Check SPF, DKIM, DMARC, MTA-STS, BIMI, and DANE records to protect against email spoofing and phishing attacks.

Results in under 60 seconds

What We Check

SPF record validation and lookup limit check
DKIM key verification
DMARC policy analysis and enforcement level
MTA-STS policy detection
BIMI record and logo verification
DANE/TLSA record validation

How It Works

1

Enter your domain name in the scanner above

2

We query DNS for SPF, DKIM, DMARC, MTA-STS, BIMI, and DANE records

3

Each record is parsed and validated against RFC specifications

4

Policy strictness and spoofing risk are evaluated

5

You get a detailed report with improvement recommendations

Email Security Checks Included

This scanner runs the following email and DNS security checks

Frequently Asked Questions

What email security records does this check?
We check SPF (Sender Policy Framework), DKIM (DomainKeys Identified Mail), DMARC (Domain-based Message Authentication), MTA-STS, BIMI, DANE/TLSA records, and SPF lookup limits. These protect your domain from email spoofing and phishing.
Why do I need SPF, DKIM, and DMARC?
SPF validates which servers can send email for your domain. DKIM adds cryptographic signatures proving emails are authentic. DMARC ties them together with a policy telling receivers what to do with failed emails. All three are needed for complete protection.
What is a good DMARC policy?
Start with p=none to monitor, then move to p=quarantine, and finally p=reject for full protection. A reject policy tells receiving servers to drop emails that fail SPF and DKIM checks.
Is this email security checker free?
Yes, all email security checks including SPF, DKIM, DMARC, and DNS analysis are included in every free scan. Upgrade to get continuous monitoring with automatic alerts when your configuration changes.

Want the Full Security Picture?

Email security is just one layer. Run a full 54-check audit covering SSL/TLS, headers, vulnerabilities, and more.

Start Full Scan