Email Security Checker
Grade a domain's SPF, DKIM, DMARC and MX records out of 100.
This tool has to ask the internet. What you enter is sent to our server, which queries public DNS, registry or certificate data on your behalf. We never log it, store it, or pass it to anyone else — but unlike the browser-only tools, it does leave your device.
About the Email Security Checker
Looks up a domain's published mail records — MX, SPF, DKIM and DMARC, plus MTA-STS and TLS-RPT — and grades the result out of 100, listing exactly which records are missing or misconfigured.
When you would use it
- Checking whether your domain is configured well enough that your mail is trusted.
- Finding out whether a domain you do not control can be spoofed.
- Getting an ordered list of what to fix first.
What it does not tell you
The lookups run on our server, because DNS has no browser equivalent, and the result reflects DNS as published right now. A good grade is a necessary condition for deliverability, never a sufficient one — it cannot see reputation, throttling, a signing key that no longer matches the signer, or mail that is accepted and then filed as spam. DKIM selectors are not discoverable from DNS, so the checker probes a list of common ones and can miss a custom selector that is present and working.