Live DNS Scanner
What's Your Email Security Grade?
Enter any domain to get an instant A–F security rating. Checks DMARC, SPF, DKIM & MX records in real time — free, no signup.
Frequently Asked Questions
What does my email security grade mean?
An A means your domain has DMARC enforcement, a valid SPF record, DKIM signatures, and working mail servers. An F means anyone can send emails pretending to be you — your domain is vulnerable to spoofing and phishing.
Why are Google and Microsoft rejecting my emails?
In February 2024, Google and Yahoo began requiring SPF, DKIM, and DMARC for all bulk senders. Microsoft followed in May 2025. As of November 2025, Gmail hard-rejects non-compliant email — messages never reach the inbox. If your grade is below B, your emails are at risk.
How do I check my email security for free?
Enter your domain in the scanner above. It checks DMARC, SPF, DKIM, and MX records in real time using Google's public DNS — completely free, no signup required. You'll get a grade and a fix plan in seconds.
What's the difference between SPF, DKIM, and DMARC?
SPF tells email servers which IPs can send on your behalf. DKIM adds a cryptographic signature proving emails weren't tampered with. DMARC ties both together and instructs receiving servers to quarantine or reject failing emails. You need all three for an A grade.
My emails go to spam — will fixing my grade help?
In most cases, yes. Missing authentication is the #1 reason legitimate emails land in spam. Authenticated domains are
2.7× more likely to reach the inbox. For faster recovery, a deliverability tool like
InboxAlly can accelerate the process from months to weeks.