Check the email security of your domain
See whether your domain is protected against fake email and CEO fraud. We check DMARC, SPF, DKIM and more, and tell you what to fix.
DMARC What should happen to fake email
SPF Who is allowed to send
DKIM Digital signature on your email
MTA-STS and TLS-RPT Encrypted delivery to you
BIMI Your logo in the inbox
Three DNS records that stop fake email
SPF
A list of the servers that are allowed to send email from your domain.
DKIM
A digital signature showing that the email comes from you and has not been changed on the way.
DMARC
Tells the recipient what to do with email that fails SPF and DKIM, and gives you reports on who sends in your name.
Why does this matter?
Fraudsters send email that appears to come from well-known companies, such as fake invoices or requests to change an account number. With the right setup, such email is stopped before it reaches the recipient. Gmail, Yahoo and Microsoft also require SPF, DKIM and DMARC from everyone who sends a lot of email.
