DMARC & SPF checker: is your email protected?

Can scammers send email in your company’s name? Enter your domain — the answer in a second, in plain language. Free, no sign-up.

Why it matters

Without protection, anyone can send your customers an email that appears to come from your address: “invoice due”, “our bank details have changed”, “your results are attached”. The inbox will not flag it as fake. In our study of 71 private clinic websites, not one domain blocked spoofed email.

SPF and DMARC in plain words

SPF is the list of servers allowed to send email from your domain. DMARC tells mail services what to do with an email that fails the check: just report it (p=none), send it to spam (p=quarantine) or reject it (p=reject). You are only protected when DMARC is set to block.

What we check

Only your domain’s public DNS records — the same ones every mail service sees. We do not store the domain you enter.