Email Security Checker

Check SPF, DKIM and DMARC: why your emails land in spam, and whether others can send email pretending to be you.

Advanced: DKIM selector (optional)Leave empty and we'll try the common ones.

Free · No sign-up · Only reads public DNS records, no email is sent

What We Check

What this tool checks

The same records Gmail, Outlook and Yahoo look at before deciding: inbox or spam.

SPF

Whether it exists, is the only one, ends in ~all or -all, includes your provider and stays under 10 DNS lookups.

DKIM

Finds your signing key using common selectors (or yours) and checks its strength.

DMARC

Your policy (none, quarantine, reject), coverage and whether you receive reports.

Extras

Mail servers and provider, MTA-STS, TLS reporting and BIMI (your logo in Gmail).

More Free Tools

Try our other free tools

All tools

Free

SEO Checker

Score your page on 20+ SEO and local search factors, with plain-language fixes.

Free

Website Authority Checker

Check your website's authority score and how it compares, with DA, PA and Spam Score where available.

Free

Meta Tag & SERP Preview

See how your page looks in Google and on WhatsApp/Facebook, edit the title and description live, and copy the tags.

Free

Robots.txt & Sitemap Validator

Check that Google and AI crawlers like ChatGPT can reach your pages, and that your XML sitemap is valid.

Free

Redirect Chain Checker

Follow every redirect for http, https, www and non-www, and catch loops, long chains and temporary redirects.

Free

UTM Link & QR Builder

Build trackable campaign links for ads, WhatsApp, Google Business Profile and flyers, with a QR code to print.

Free

Security Header Checker

Grade your website's HTTPS and browser security headers from A+ to F, with copy-paste fixes.

FAQs

Email security: questions

Prefer to talk it through? Our team in Thane West is happy to help.

Why do my business emails go to spam?

The most common reason is missing or broken SPF, DKIM or DMARC records. These DNS settings prove to Gmail, Outlook and Yahoo that an email really comes from your business. Without them, even genuine quotes and invoices can land in spam.

What are SPF, DKIM and DMARC in simple terms?

SPF is a list of the services allowed to send email for your domain. DKIM adds a digital signature to each email so receivers can check it wasn't faked or changed. DMARC tells receivers what to do when an email fails those checks, and sends you reports about who is using your domain.

Is DMARC required now?

Since 2024, Gmail and Yahoo require SPF, DKIM and DMARC from anyone sending a lot of email, and strongly prefer them for everyone. Starting with "p=none" is safe: it only monitors. Once reports show your real emails pass, move to "quarantine" to block spoofing.

What is a DKIM selector and where do I find it?

The selector is the name of your DKIM key, for example "google" for Google Workspace or "selector1" for Microsoft 365. Open any email you sent, view the original message or headers, and look for "DKIM-Signature" … "s=" followed by the selector.

Will changing these records stop my email working?

SPF and DMARC at p=none are safe to add. The risky changes are having two SPF records, forgetting to include a service that sends for you (like your website forms, CRM or newsletter tool), or jumping straight to p=reject. Check with this tool after every change.

Free · No obligation

Get a free growth plan for your business

Tell us what you do. Our Thane team will call you within one working day with ideas you can use, even if you don't hire us.

  • Quick audit of your website & Google profile
  • Where your competitors are beating you
  • A clear 90-day plan with costs

Prefer to talk? Call Now