Last updated: · By

Email Authentication Checker

Enter a domain to see how well it is protected against spoofing: its SPF, DMARC and (where a selector is known) DKIM records, with a plain-English read on the posture — whether DMARC enforces (p=reject) or just monitors (p=none), whether SPF ends in -all or the weaker ~all, and whether anything is missing. Lookups use public DNS-over-HTTPS from your browser. This reads a domain’s published records; to analyse the headers of an email you received, use the email header analyzer.