Email domain check
Can someone send mail that looks like it comes from your domain? Enter a domain to see how well it is protected, and what to fix.
What it checks
- MX: where mail for the domain is delivered. A domain that never receives mail should say so with a "null MX".
- SPF: which servers may send mail for the domain, and what to do with the rest.
- DMARC: what receivers should do with mail that fails the checks: nothing, junk it, or reject it.
- DKIM: signatures that prove a message wasn't changed. Senders can use any name for their key, so we try the common ones; not finding one doesn't prove there is none.
- MTA-STS and TLS reporting: whether other servers must use encryption to deliver to you, and whether you hear about failures.
- DNSSEC: whether the answers themselves are signed.
Privacy
The lookups are public DNS queries, made by our server through Cloudflare's DNS resolver. We don't store the domains you check or the results. Only domains are accepted; never type an email address.
A domain you own but never send mail from (a spare or defensive domain) should still be locked down:
a null MX, an SPF record of v=spf1 -all and a DMARC policy of p=reject. Spammers
favour unprotected spare domains.
Want your company's email set up properly?
Everything here is free to use and do yourself. If you'd rather have it designed and built for your company, in accounts you own, that is what makeprivacy.com does.