DMARC & SPF Email Security Checker
Test if your domain is protected against email spoofing, phishing, and avoid having your emails land in spam folders.
Overview & why this matters
Email spoofing and impersonation happen when cybercriminals send fake emails pretending to be your business.
Without a valid DMARC policy (p=reject or p=quarantine) and aligned SPF records, anyone can send emails from your domain, and major providers like Google and Yahoo may reject your legitimate emails.
Why email authentication is critical for your business
Stop Email Spoofing & Phishing
Prevent scammers from forging your business email address to deceive your customers, partners, and employees.
Improve Email Deliverability
Google and Yahoo now enforce strict authentication rules. Missing DMARC and SPF causes your sales and support emails to go straight to spam.
Prevent Invoice & CEO Fraud
Scammers target businesses with spoofed invoices and fake transfer requests when domains lack strict authentication enforcement.
Standard Remediation Policy
Publish a TXT record at `_dmarc.yourdomain.com` with quarantine or reject enforcement:
_dmarc.yourdomain.com TXT "v=DMARC1; p=reject; sp=reject; pct=100; rua=mailto:[email protected]; aspf=r; adkim=r;"