iterate

free tool · email security

Can someone send email as you?

Type your business domain. We look up its DMARC, SPF and DKIM records and tell you in plain English whether it is protected, and what to fix if it is not.

We only read public DNS records, the same ones every mail server reads. We do not store the domains people check.

what it checks

Three records, one job.

  • DMARCThe record at _dmarc.yourdomain that tells receivers what to do with mail that fails the checks: nothing (p=none), spam folder (quarantine) or refuse it (reject). Reject is the goal.
  • SPFThe list of servers allowed to send your email. Exactly one record, ending in ~all or -all, and no more than 10 DNS lookups.
  • DKIMA signing key so receivers can check your mail was not forged or changed. We look at the Microsoft 365 (selector1, selector2) and Google Workspace (google) names.

New to all this? Our guide DMARC for NZ small business in 30 minutes walks through the setup for Microsoft 365. Or we can run it for you.