Enter your domain to check its SPF, DKIM, and DMARC records. Missing or misconfigured email authentication records cause legitimate emails to be rejected or marked as spam by recipient mail servers.
Sender Policy Framework (SPF) is a DNS TXT record that lists which mail servers are authorized to send email for your domain. Without it, spammers can send email that appears to come from you.
DomainKeys Identified Mail (DKIM) adds a cryptographic signature to outgoing emails. Receiving mail servers verify the signature against a public key in your DNS, confirming the email was not tampered with in transit.
Domain-based Message Authentication, Reporting and Conformance (DMARC) ties SPF and DKIM together. It tells receiving servers what to do when email fails authentication — none (monitor), quarantine, or reject — and where to send reports.
SPF / DKIM / DMARC protect the mail transport layer. S/MIME certificates add end-to-end encryption and digital signatures at the message level, giving recipients proof that the email came from you and was not altered. They work together for maximum protection.
Sender Policy Framework — lists which servers are authorized to send email for your domain. Missing SPF is a common cause of email rejection.
DomainKeys Identified Mail — a cryptographic signature attached to outgoing email. Verifies the email was not modified in transit.
Domain-based Message Authentication — tells recipient servers what to do with emails that fail SPF or DKIM checks. Critical for anti-spoofing protection.