Free check, takes a minute

Can someone send email in the name of your domain?

Type your domain. We tell you in plain words whether it has DMARC and SPF, what the result means, and the steps to fix it in an order that breaks nothing.

What happens to your data. The check runs in your browser. The domain you type goes from your browser straight to Cloudflare's public DNS (cloudflare-dns.com), not to us. We do not receive the domain, store anything, send any form or set cookies for this. We only read DNS records that are public anyway.

What DMARC and SPF mean

SPF is a public list of the servers allowed to send email for your domain. DMARC tells the servers that receive a message what to do when a message that claims to come from you fails the check: nothing (p=none, reports only), spam (quarantine) or refusal (reject). Without DMARC, a forged message with your address reaches your customers, suppliers or colleagues just like a real one.

The check only reads public records. It does not send email, enter any mailbox or test your mail server.

Limits, stated plainly

The result shows your DNS records at the moment of reading. It does not verify that your messages reach the recipient's inbox.
If the lookup fails (network, rate limit), we say we could not check. We never treat an error as "unprotected".
This is not a compliance assessment and does not say whether NIS2 or any other regulation applies to you. We do not provide legal advice.
We promise no result. A correctly configured domain makes your address harder to forge; it does not remove other risks.

Want help?

If you would rather not change DNS records yourself, write to us on the contact page, in writing. You do not need to buy anything: the check stays free. Romanian public institutions: the same check in Romanian on devaland.cloud.