Email Security Checker
Run a free check of your domain’s SPF, DKIM and DMARC records, the three settings that decide whether a criminal can spoof your email and target your clients, staff and suppliers.
We only read public DNS records. Nothing is stored and no email is sent.
This is a surface check of publicly published DNS records (SPF, DKIM, DMARC). It is a useful first indicator, not a full audit. DKIM is checked against common provider selectors, so a “not found” result can mean a custom setup rather than none in place. Guard IQ Ltd · IT & Security Managed For You.
Guard IQ · IT & Security Managed For You
Not sure what your result means?
We will read your check with you, explain any gaps in plain English, and show you what it takes to close them. No pressure, no jargon.
Book a free consultation →Email spoofing, answered
The short version of what the check looks at and why it matters.
What is email spoofing?
Email spoofing is when someone sends an email that looks like it came from your business, using your domain in the “from” address. Staff, clients and suppliers see your name and trust the message. It is a common first step in invoice fraud and supplier-impersonation scams.
How do I stop email spoofing?
You set up three records on your domain: SPF, DKIM and DMARC. Together they tell receiving mail servers who is allowed to send as you, and what to do with anything that fails. The important part is a DMARC policy set to quarantine or reject, which blocks faked email rather than only reporting it.
What are SPF, DKIM and DMARC?
SPF lists the servers allowed to send email for your domain. DKIM adds a signature that proves a message really came from you and was not altered. DMARC links the two and tells receivers to reject or quarantine anything that fails the checks. All three working together is what stops spoofing.
Does a “protected” result mean my email is safe?
It means your public DNS records are set correctly against basic domain spoofing, which is a good sign. It does not cover account takeover, staff being tricked by phishing, or devices without proper security. Those risks sit inside your systems and need a fuller review.
Is the checker free, and do you store my data?
It is free and stores nothing. The check runs in your browser, reads only public DNS records, and shows the result. There is no sign-up and no email required.
This checker is a surface check of publicly published DNS records and is a useful first indicator, not a full security audit. For a complete review of your email, accounts and devices, book a consultation.