Check whether your email domain can be spoofed.

SPF is the list of servers allowed to send mail as you. DKIM is a signature that proves a message was not changed on the way. DMARC tells receiving servers what to do when a message fails those checks, and sends you reports.

Without these records, anyone can send invoices or password resets that look like they came from you. Google and Microsoft also expect them now, so mail from a domain without them is more likely to land in spam.

It reads the public DNS records for your domain, the same ones every mail server reads before accepting your mail. We do not send any mail or change anything, and it usually takes a few seconds.

DKIM keys live under a name your mail provider picks, called a selector. We try the sixteen most common ones. If your provider uses a different name, we cannot see the key even when it is there. Your provider's DKIM page will tell you for sure.