Free email check
Are your emails landing in spam?
Type your domain into the check below. It looks at your SPF, DKIM and DMARC records, the settings that tell other inboxes your email really comes from you.
Check your domain
Enter your domain to check your email security.
We look at the three DNS records that prove your email really comes from you. If the check flags any of them, your current IT provider probably isn't keeping on top of your email security.
What we check
The three records that stop spoofing.
SPF: who can send
A list of the services allowed to send email as your domain, such as Microsoft 365 or your invoicing tool. Anything not on the list looks suspicious.
DKIM: proof it's really you
A digital signature on every email, so the receiving inbox can tell it came from you and wasn't changed on the way.
DMARC: what to do with fakes
Your instructions to other inboxes for email that fails the first two checks, plus reports that show who is sending as you.
Common questions
Email security, explained.
What are SPF, DKIM and DMARC?
They are three records stored in your domain's DNS settings. SPF lists the services allowed to send email as you. DKIM adds a digital signature to each email so the receiving inbox can check it really came from you and wasn't changed on the way. DMARC tells inboxes what to do with email that fails those checks, and sends you reports on who is sending email using your domain.
Why does my business need them?
Without them, anyone can send email that looks like it came from your domain. That is how a lot of fake invoices and impersonation scams reach your clients. The big email providers also check these records, so email from a domain that doesn't have them set up properly is more likely to land in spam or be rejected.
What should I do if the check flags a problem?
Don't panic. Most problems come down to a few DNS changes: tidying SPF so it only lists the services you actually use, switching on DKIM in Microsoft 365 or Google Workspace, and moving DMARC from monitoring to enforcement once you know your genuine email passes. If your IT provider hasn't done this already, it is worth asking why. Book a 15-minute call and we'll talk you through what your results mean.
Why can't the check find my DKIM record?
DKIM records sit under a name called a selector, which your email provider chooses. A scanner has to guess where to look, so if your provider uses an unusual selector the check may report DKIM as missing even though it is set up. It can also mean DKIM was never switched on, which is common in Microsoft 365. We can tell you which it is.
Score not where it should be?
We'll set your records up properly and keep an eye on them. Fifteen minutes is enough to know whether we can help.