Email security checker
Instantly check a domain's SPF, DMARC and DKIM records. Free, no signup.
Want this watched automatically?
WWT checks SPF, DMARC and DKIM - plus uptime, SSL/TLS and domain expiry - every day and alerts you the moment something drifts. Free, no credit card.
Start monitoring freeHow to read your email security result
The checker looks up three DNS records that together decide whether the world trusts mail from your domain. SPF lists the servers allowed to send for you, DKIM lets receivers verify a message was not altered, and DMARC tells them what to do when SPF or DKIM fails. A green result means all three are present and coherent.
Missing or misconfigured records are why legitimate mail lands in spam and, worse, why attackers can spoof your domain. Every finding here is written in plain language with the parsed record on display, so you can see exactly what was checked and hand the fix to whoever manages your DNS.
About email authentication
What is SPF?
SPF (Sender Policy Framework) is a DNS record listing which servers may send email for your domain. It lets receiving servers reject spoofed mail.
What is DMARC?
DMARC tells receiving servers what to do with mail that fails SPF or DKIM (none, quarantine or reject) and where to send reports. A strong policy (p=reject) stops spammers impersonating your domain.
What is DKIM?
DKIM adds a cryptographic signature to your outgoing email so receivers can verify it really came from you and wasn't altered in transit. It is published per selector.
Why it matters
Without SPF, DMARC and DKIM, anyone can send email that looks like it is from your domain - hurting deliverability and exposing customers to phishing. Proper configuration protects your brand and your inbox placement.