Is your domain protected against email spoofing?

Check your DMARC, SPF and DKIM records in seconds. Free, no account needed.

We read your DMARC, SPF and DKIM records, count your SPF lookups, and tell you in plain words what's wrong and how to fix it.

Send an email to a one-time address and see exactly what a receiver sees: which server sent it, and whether SPF, DKIM and DMARC pass.

Point your DMARC reports at us with one DNS change. We turn the daily XML into a dashboard: who sends as you, and whether it passes.

Getting to p=reject, step by step

Publish SPF and turn on DKIM at every service that sends email as your domain.
Publish DMARC with p=none and a DMARC Tool report address. Nothing changes for your mail yet.
Read the reports for a few weeks. Fix each sender that fails.
Move to p=quarantine, then p=reject. Spoofed mail now goes to spam or is refused.