SPF and DMARC check
Find out in seconds whether someone can send email in your domain’s name. We read two public DNS records. Nothing is sent to the website, and there is nothing to sign up for.
Questions
- What is an SPF record?
- A TXT record at your domain that lists the servers allowed to send its email, for example v=spf1 include:_spf.google.com -all. The ending decides what happens to everything else: -all rejects it, ~all marks it suspicious, +all lets anyone send as you.
- What is a DMARC record?
- A TXT record at _dmarc.yourdomain that tells receivers what to do with mail that fails SPF and DKIM: p=none only reports it, p=quarantine sends it to spam, p=reject blocks it. For example v=DMARC1; p=reject.
- Is it safe to check any domain?
- Yes. SPF and DMARC are public DNS records that anyone can read. The check reads them and sends nothing to the website itself.
- Why is DKIM not checked?
- A DKIM key lives under a selector name that only your mail provider knows, so it cannot be found reliably from the outside. We say so instead of guessing.