Free tool

Free DMARC, SPF and MX checker

Type a domain to read its SPF, DMARC and MX records live. See where it sits on the DMARC ladder and what to publish next.

Mail Security · Posture · EMCHEQSample

Mail Security

Posture

Type any domain to read its SPF, DMARC and MX records live. DKIM and the full tests run in the app.

How it works

Three steps.

Enter a domain such as example.com.

SPF, DMARC and MX are read live over public DNS from your browser.

Find the domain on the DMARC ladder and read the suggested next step.

Keep reading

SPF lists who may send for your domain, DKIM signs messages, DMARC sets the policy. Learn the records, qualifiers, alignment and common mistakes.

A step-by-step plan to move a domain from no DMARC to p=reject: publish p=none with reports, align every sender, then quarantine and reject safely.

FAQ

The short answers. The rest you can find out by trying it free.

How does this DMARC checker work?

It reads your domain's SPF, DMARC and MX records over public DNS from your browser and shows what they say.

Does it check DKIM?

Not on this page. DKIM is published at a selector you choose, so the full check runs in the app, which tests common selectors for you.

Is anything sent to EMCHEQ?

No. The lookups go from your browser to a public DNS service.

What is a good DMARC policy?

p=reject is the strongest, but reach it in steps: p=none with reports first, then quarantine, then reject.