Email security checker

Instantly check a domain's SPF, DMARC and DKIM records. Free, no signup.

Want this watched automatically?

WWT checks SPF, DMARC and DKIM - plus uptime, SSL/TLS and domain expiry - every day and alerts you the moment something drifts. Free, no credit card.

Start monitoring free

About email authentication

What is SPF?

SPF (Sender Policy Framework) is a DNS record listing which servers may send email for your domain. It lets receiving servers reject spoofed mail.

What is DMARC?

DMARC tells receiving servers what to do with mail that fails SPF or DKIM (none, quarantine or reject) and where to send reports. A strong policy (p=reject) stops spammers impersonating your domain.

What is DKIM?

DKIM adds a cryptographic signature to your outgoing email so receivers can verify it really came from you and wasn't altered in transit. It is published per selector.

Why it matters

Without SPF, DMARC and DKIM, anyone can send email that looks like it is from your domain - hurting deliverability and exposing customers to phishing. Proper configuration protects your brand and your inbox placement.