Email security
Stop others sending email in your name
Email was built without proof of who sent it. Three DNS records add that proof: SPF, DKIM and DMARC. Most domains have at least one of them missing or too weak.
How the three records work together
SPF lists the servers allowed to send your email. DKIM signs every message so receivers can check it really came from you and was not changed.
DMARC ties them to the address people see in the From line and tells receivers what to do when a message fails: deliver it, send it to spam, or reject it.
Only all three together stop spoofing. SPF or DKIM alone do not protect the From address, and DMARC without them has nothing to check.
Why it matters now. Phishing that pretends to be your company hurts your customers and your name. And since 2024 Google and Yahoo reject or junk bulk email from domains without proper SPF, DKIM and DMARC, so a weak setup also costs you deliverability.
The free check reads these records in seconds and gives you the exact record to add or change for each problem.