Free Email Security Checker (SPF, DKIM, DMARC)
Test email authentication online. Validate SPF records, check DKIM configuration, verify DMARC policy, and analyze MTA-STS, TLS-RPT, BIMI & DANE. Ensure compliance with Google, Yahoo, and Microsoft bulk sender requirements.
SPF/DKIM/DMARC
Compliance Check
Advanced Protocols
Comprehensive Email Security Analysis
Our scanner performs a thorough analysis of your domain's email security configuration, checking all critical protocols and records:
SPF Records
Sender Policy Framework validation and DNS lookup count analysis
DKIM Records
DomainKeys Identified Mail configuration and key verification
DMARC Policy
Domain-based Message Authentication policy and reporting URIs
MX Records
Mail server configuration and redundancy checks
MTA-STS
Mail Transfer Agent Strict Transport Security policy validation
TLS-RPT
TLS reporting configuration for monitoring email encryption
BIMI
Brand Indicators for Message Identification (logo display)
DANE/TLSA
DNS-based Authentication of Named Entities for certificate validation
Why Email Security Matters
Email Authentication Benefits
- Prevents email spoofing and phishing attacks
- Improves email deliverability rates
- Protects brand reputation and trust
- Required for Gmail, Yahoo & Outlook delivery
Compliance Requirements
- SPF record mandatory for bulk senders
- DMARC policy required by major providers
- DKIM signing recommended for all emails
- MTA-STS enhances transport security
Email Security Best Practices
Google, Yahoo, and Microsoft now require SPF, DKIM, and DMARC for bulk email senders. Without proper email authentication, your messages may be rejected or marked as spam, significantly impacting deliverability and business communications.
- Implement SPF records to authorize sending servers
- Configure DKIM to cryptographically sign emails
- Set up DMARC policy to specify handling of failed authentication
- Deploy MTA-STS to enforce TLS encryption for email transport
- Use TLS-RPT for reporting on TLS connection issues
- Consider BIMI for brand logo display in email clients
- Regularly monitor and update email security configurations
Check a single record
Need just one record? Use a focused tool for SPF, DKIM, DMARC or MX - each runs the same scan and links back here for the full picture.
SPF Checker
Validate SPF & the 10-lookup limit
DKIM Checker
Find selectors & check key strength
DMARC Checker
Policy, enforcement & reporting
MX Lookup
Mail servers, priorities & redundancy
Build a new record
Setting up email authentication from scratch? Generate a valid record and copy it straight into your DNS.
Email security questions
What does the email security checker test?
It looks up your domain's SPF, DKIM and DMARC records, checks that each is present and correctly formed, and flags weaknesses such as an SPF record that allows any sender or a DMARC policy that only monitors.
Why do SPF, DKIM and DMARC matter?
Together they let receiving mail servers tell real email from your domain apart from forgeries. Without them, anyone can send phishing that appears to come from you, and your genuine email is more likely to land in spam.
Do Gmail and Yahoo require DMARC?
Yes, for bulk senders. Since 2024 both require SPF, DKIM and a DMARC record for domains sending large volumes of email to their users. A DMARC record is good practice for every domain that sends email.
What DMARC policy should I use?
Start with p=none to collect reports without affecting delivery, fix any legitimate senders that fail, then move to p=quarantine and finally p=reject so forged mail is blocked.
Is the email security checker free?
Yes, with no registration. It only reads public DNS records, so it never sends email or touches your mail server.
This is one check. A full scan runs them all.
FreeThe Email Security Check covers one area. A full scan runs every check on the same site in one go, so nothing it does not reach goes unnoticed.
Covered by this check
- SPF record validation
- DKIM configuration check
- DMARC policy analysis
- MTA-STS verification
- TLS-RPT validation
- BIMI & DANE checks
- MX record analysis
Added by a full scan
- DNS security (DNSSEC, CAA)
- SSL/TLS certificate validation
- Security headers analysis
- WordPress vulnerability scanning
- Malware & script detection
- Domain reputation analysis
- Port scanning
- And 6+ more security checks
Want it checked automatically? A free account rescans one site every week and emails you new findings. No credit card.
Start free monitoringMore email and DNS security tools
SPF Checker
Check an existing SPF record for errors and lookup limits.
DMARC Checker
Validate an existing DMARC record and see how it is configured.
DKIM Checker
Verify your DKIM selector and public key.
MX Lookup
Look up the mail servers for any domain.
DNS Lookup
Look up A, AAAA, MX, TXT, NS and other DNS records for any domain.
DNS Security Checker
Test DNSSEC configuration, CAA records and nameserver security.