Free tool
Check your email security
Enter your domain or email address. In a few seconds you’ll see who handles your email and whether SPF and DMARC are protecting your domain from spoofing.
Free. It reads public DNS records only, and nothing is sent to us.
'%3e%3cpath%20d='M0%200V10'%20stroke='%2327203B'%20stroke-width='2'/%3e%3c/pattern%3e%3c/defs%3e%3cg%20stroke-linecap='round'%20stroke-linejoin='round'%3e%3cpath%20d='M326%20143.8Q340%20168%20326%20192.2L284%20265Q270%20289.2%20242%20289.2L158%20289.2Q130%20289.2%20116%20265L74%20192.2Q60%20168%2074%20143.8L116%2071Q130%2046.8%20158%2046.8L242%2046.8Q270%2046.8%20284%2071Z'%20fill='%23D4F1EE'/%3e%3crect%20x='36'%20y='36'%20width='110'%20height='70'%20fill='url(%23r4email-dots)'%20opacity='0.22'/%3e%3cpath%20d='M365%2058.8Q368%2064%20365%2069.2L356%2084.8Q353%2090%20347%2090L329%2090Q323%2090%20320%2084.8L311%2069.2Q308%2064%20311%2058.8L320%2043.2Q323%2038%20329%2038L347%2038Q353%2038%20356%2043.2Z'%20fill='none'%20stroke='%2327203B'%20stroke-width='2.4'/%3e%3cpath%20d='M70%20258.5Q72%20262%2070%20265.5L64%20275.9Q62%20279.3%2058%20279.3L46%20279.3Q42%20279.3%2040%20275.9L34%20265.5Q32%20262%2034%20258.5L40%20248.1Q42%20244.7%2046%20244.7L58%20244.7Q62%20244.7%2064%20248.1Z'%20fill='none'%20stroke='%2340B2A7'%20stroke-width='2.4'/%3e%3cpath%20d='M30%20150C52%20120%2070%20112%2092%20116'%20stroke-dasharray='8%2010'%20fill='none'%20stroke='%2327203B'%20stroke-width='2.4'/%3e%3crect%20x='96'%20y='116'%20width='190'%20height='128'%20rx='10'%20fill='%2327203B'/%3e%3crect%20x='88'%20y='108'%20width='190'%20height='128'%20rx='10'%20fill='%23FFFFFF'%20stroke='%2327203B'%20stroke-width='3'/%3e%3cpath%20d='M92%20112L183%20179.7L274%20112Z'%20fill='%23E6E8F1'/%3e%3cpath%20d='M91%20116L183%20179.7L275%20116'%20fill='none'%20stroke='%2327203B'%20stroke-width='3'/%3e%3cpath%20d='M91%20230L152.6%20172M275%20230L213.4%20172'%20fill='none'%20stroke='%2327203B'%20stroke-width='2.4'/%3e%3cpath%20d='M254.4%20190V173.2A24.6%2024.6%200%200%201%20303.6%20173.2V190'%20fill='none'%20stroke='%2327203B'%20stroke-width='11'/%3e%3cpath%20d='M254.4%20190V173.2A24.6%2024.6%200%200%201%20303.6%20173.2V190'%20fill='none'%20stroke='%23B8BED0'%20stroke-width='4'/%3e%3crect%20x='246'%20y='194'%20width='82'%20height='68'%20rx='12'%20fill='%2327203B'/%3e%3crect%20x='238'%20y='186'%20width='82'%20height='68'%20rx='12'%20fill='%2340B2A7'%20stroke='%2327203B'%20stroke-width='3'/%3e%3ccircle%20cx='279'%20cy='214.6'%20r='7'%20fill='%2327203B'/%3e%3crect%20x='275.7'%20y='216.6'%20width='6.6'%20height='19'%20rx='3.3'%20fill='%2327203B'/%3e%3ccircle%20cx='94'%20cy='108'%20r='20'%20fill='%2398FCF2'%20stroke='%2327203B'%20stroke-width='3'/%3e%3cpath%20d='M84%20108l6.8%206.8l12.8%20-14.2'%20fill='none'%20stroke='%2327203B'%20stroke-width='3'/%3e%3cpath%20d='M330%20123Q333.6%20132.4%20343%20136Q333.6%20139.6%20330%20149Q326.4%20139.6%20317%20136Q326.4%20132.4%20330%20123Z'%20fill='%2398FCF2'%20stroke='%2327203B'%20stroke-width='2.4'/%3e%3cpath%20d='M160%2061Q162.5%2067.5%20169%2070Q162.5%2072.5%20160%2079Q157.5%2072.5%20151%2070Q157.5%2067.5%20160%2061Z'%20fill='%23FFFFFF'%20stroke='%2327203B'%20stroke-width='2.4'/%3e%3c/g%3e%3c/svg%3e)
Want help with this?
We set up SPF, DKIM and DMARC as part of every Microsoft 365 configuration, and MYLE Premium includes MYLE Email Protect with DMARC enforcement as standard.
What we check
Email provider
Your MX records show which service receives your email, such as Microsoft 365 or Google Workspace.
SPF
Whether you publish one valid list of the servers allowed to send as your domain, and how strict it is.
DMARC
Whether receivers are told to reject, quarantine or just monitor email that fails the checks.
DKIM
Not visible from outside without your provider’s selector name. We check it in an IT Assessment.
Frequently asked questions
What are SPF, DKIM and DMARC?
SPF lists the servers allowed to send email as your domain. DKIM adds a digital signature to your outgoing email. DMARC tells receiving servers what to do with email that fails those checks, and sends you reports. Together they make it much harder for someone to send email pretending to be you.
Why does this matter for a law firm or accountancy practice?
Criminals impersonate firms by email to redirect payments or request sensitive information. A DMARC policy of “reject” stops receiving servers delivering email that falsely uses your exact domain. It doesn’t stop look-alike domains, which is where staff training and email filtering come in.
Is it safe to run the check?
Yes. It only reads public DNS records, the same information any mail server can see. The lookups go from your browser straight to Cloudflare’s public DNS service. We don’t see or store the domain you check.
Can you fix the problems it finds?
Yes. SPF, DKIM and DMARC set-up is part of our standard Microsoft 365 configuration, and MYLE Premium includes MYLE Email Protect with DMARC enforcement. Get an IT Assessment or contact us.
Just Gilbey migrated my emails from my Gmail account to Office 365 in order for me to have my domain, which provided my company with a more professional image rather than using a private email account. David and the team are highly knowledgeable and professional in their sector and I would have no hesitation in using or recommending them for IT-related matters in the future.
John BensonOwner, Benson Planning StudioFind out where your IT stands
Our IT Assessment takes about two minutes. Tell us about your company and what’s prompting the change, and we’ll tell you what to do next.
Everything we can help with
Start from what you need to get done.
Check something
Fix or protect something
- Get a broken computer, server or email fixed
- Stop fake invoice and payment emails
- Answer our insurer’s security questionnaire
- Have all our IT looked after for a fixed monthly price
- Make sure we can recover from a bad day
- Work securely from home, court or a client’s office
- Replace our phone system
- Get Wi-Fi, network cabling or CCTV installed
- Give our IT person extra hands