Your files stay on your device

Email security checker

Run MX, SPF, DMARC, DKIM and DNSSEC checks for a domain in one pass and score them, never counting an unavailable check as a failure.

Press the button to run the checks
Nothing leaves this page until you do. Five checks run in one pass: MX, SPF, DMARC, DKIM with your selector, and DNSSEC. A missing record reads as not configured, not failed, and sits out of the score.

This is a DNS read, not a mail audit. It leaves out BIMI, MTA-STS, and TLS-RPT on purpose; MTA-STS has its own checker on this site. Selector discovery without a hint is genuinely impossible, which is why the empty selector path reports DKIM as not configured instead of failing it. DNSSEC is checked by DNSKEY record presence only, not cryptographic validation.
Options

More network tools

- Live DNS lookup (/network/dns)
- DNS explainer (/network/dns-explain)
- RDAP lookup (/network/rdap)
All network tools (/network)

Was this tool useful?
YesNo

Canonical HTML: https://nutter.tools/network/email-security-checker
Markdown version: https://nutter.tools/network/email-security-checker.md
Plain-text version: https://nutter.tools/network/email-security-checker.txt
Agent index: https://nutter.tools/llms.txt