Check your domain's email

What the checker looks at

Each item is a record in your domain's DNS. Together they decide whether your emails arrive and whether someone can pretend to be you.

MX

Tells the world which server receives the domain's email. Without MX, nobody can email you.

SPF

The list of servers allowed to send email as your domain. Providers use it to tell your messages from fakes.

DKIM

A digital signature on every email you send. It proves the message came from you and was not changed on the way.

DMARC

Tells providers what to do with email pretending to be from your domain (deliver it, send it to spam or reject it) and where to send reports.

MTA-STS

Makes senders use an encrypted, verified connection to your mail server. It protects against anyone reading or diverting messages on the way.

TLS-RPT

An address that receives reports of encryption failures when people send you email. Useful together with MTA-STS.

BIMI

Shows your brand's logo next to your emails in some providers. Optional, and it only works with DMARC at quarantine or reject.

The score goes from 0 to 100: MX is worth 20, SPF 25, DKIM 20, DMARC 25, MTA-STS 5 and TLS-RPT 5. An ok item counts in full, a warning counts half, a missing one counts nothing. BIMI is not scored.

About DKIM: there is no public list of a domain's keys, so we try the most used selectors (Google, Microsoft 365, Mailchimp, Zoho, SendGrid, cPanel, Amazon SES and mxproxy's). If your provider uses another name, DKIM may show as missing even when it is right.

Got a DMARC report and could not make sense of it? Read a DMARC report