Free Email Security Checker (SPF, DKIM, DMARC)
Check your domain's email authentication · SPF, DKIM, and DMARC · and see if you're vulnerable to spoofing.
Frequently asked
Which DKIM selectors are checked?
The tool probes the five most common selectors: default, google, selector1, selector2, and k1. If your provider uses a different selector, no DKIM record will be reported.
What is a weak DMARC policy?
A DMARC record with p=none tells receivers to only monitor · not reject or quarantine · unauthorized mail. That leaves your domain effectively spoofable. Move to p=quarantine or p=reject.
Related tools
- DNS Security Checker · Check whether a domain is protected by DNSSEC and restricts certificate issuance with CAA records · two defenses against DNS hijacking and rogue certificates.
- DNS Lookup · Query any domain's DNS records live · A, AAAA, CNAME, MX, TXT, NS, and CAA · resolved over encrypted DNS-over-HTTPS.
- security.txt Validator · Check whether a site publishes a valid security.txt · the RFC 9116 file that tells researchers how to responsibly report vulnerabilities.