Email health check
A clear summary for business owners, with full technical detail for IT teams.
What the health check covers
One check reads every public DNS record that decides whether your email is trusted, then grades each area:
- Mail servers (MX): can your domain receive email, and do the servers resolve and have reverse DNS names?
- SPF: which services may send email on your behalf, and is the record valid and inside the 10-lookup limit?
- DKIM: is your email digitally signed, and is the signing key strong enough?
- DMARC: do inboxes have instructions to block email that fakes your domain, and are you receiving reports?
- Extras: DNSSEC, MTA-STS, TLS reporting and BIMI. These are optional and never lower your verdict.
Reading your results
The Simple view gives one sentence about your email’s health, the changes to make first, and the exact records to copy. The Technical view lists every individual test with its result, the raw records, the SPF lookup tree and DNS housekeeping details for IT teams. Use Download PDF to send the report to your IT provider, or share the page link: anyone who opens it runs the same public check in their own browser.
Why this matters now
Gmail, Yahoo and Outlook.com now require senders to authenticate their email with SPF, DKIM and DMARC, and they increasingly reject or junk email that doesn’t. A domain without DMARC protection can also be used by fraudsters to send convincing fake invoices and password resets to your customers and staff. Most problems take minutes to fix once you know exactly what is missing.
Read how we test for the standards behind each check, or start with SPF, DKIM and DMARC explained.