Email Security Checker

SPF, DKIM, and DMARC explained

SPF lists which servers may send email for your domain. DKIM adds a cryptographic signature to verify authenticity. DMARC ties them together and tells receivers to quarantine or reject spoofed email.

What each policy means

• SPF -all (strict) - Only explicitly listed servers can send email. Best protection.
• SPF ~all (softfail) - Unlisted senders are flagged but not rejected. Common but weaker.
• SPF +all - Any server can send. Dangerous - allows spoofing.
• DMARC reject - Receiving servers must reject spoofed email. Strongest setting.
• DMARC quarantine - Spoofed email goes to spam. Medium protection.
• DMARC none - Reports only, no enforcement. Weak.