Is your domain protected with SPF, DKIM and DMARC? Find out in seconds, with a grade and the exact records to fix it. It stops people sending email pretending to be you, and helps keep your own email out of spam.
Without DMARC, anyone can send email that looks like it’s from your domain: fake invoices, password resets, “urgent” requests to your clients.
Gmail, Yahoo and Microsoft check these records on every email. Missing or broken ones send your quotes, receipts and newsletters to spam.
Since 2024, Gmail and Yahoo require SPF, DKIM and DMARC from anyone sending email in bulk, and expect SPF or DKIM from everyone.
SPF is a list of the services allowed to send email as your domain (for example Google Workspace and your newsletter tool). DKIM adds a hidden signature to each email so receivers can tell it’s really from you and wasn’t changed. DMARC ties them together: it tells receivers what to do with email that fails (deliver, send to spam, or refuse) and sends you reports about who is sending as your domain.
It only reads public DNS records, the same ones every email receiver reads. Nothing is changed, and you don’t need to log in anywhere.
DKIM records sit under a name (a “selector”) chosen by your email provider, and DNS can’t list them. We try the common names. If yours is different, type it under “DKIM selector” and check again. Your provider’s DKIM settings show it.
Not unless you’re sure every service that sends as you passes SPF or DKIM. Start with p=none and a report address, read the reports for a few weeks, fix anything missing, then move to p=quarantine and finally p=reject.
Yes. Unused domains are a favourite for spoofing. Add v=spf1 -all as SPF and v=DMARC1; p=reject; as DMARC to tell everyone no email should come from it.
All Purpose Forms gives small businesses online forms, payments, e-signatures, appointment booking and a website on their own domain. Start free, no card needed.