Email security checker.

Check the settings that help stop others sending email in your business’s name.

Enter your email address to see whether the records that protect your business’s email are in place.

Why it matters

Anyone can pretend to be you

Without the right records, a scammer can send an email that says it is from your business, to your customers, your suppliers or your own staff. The records this check looks at are what stop that.

Your genuine email lands in junk

The same records tell receiving mail services your email is real. When they are missing or wrong, your invoices and replies quietly end up in spam folders.

It is usually a quick fix

Most of what this report finds is a few lines in your domain settings. Your email provider can normally put it right in an afternoon.

Common questions

Before you run it, or after you have.

What are the records you check?

Three public settings on your domain. One lists the services allowed to send email as you. One lets your outgoing email carry a signature that proves it was not altered. One tells receiving mail services what to do with anything that fails those checks. You do not need to remember their names; the report explains each one where it appears.

Is it safe to run this on my domain?

Yes. We only read the public records anyone can look up. We do not send any email, look inside a mailbox or change anything.

The report says my signing key could not be found. Is that bad?

Not necessarily. Signing keys are published under a name your email provider chooses, and we try the common ones. If yours uses an unusual name we will not see it, so ask your provider to confirm your outgoing email is signed.

My email is fine. Why bother?

Because the problems this report finds do not stop email arriving. They let other people send email as you, and they make your genuine email more likely to be treated as junk. Neither shows up until it costs you.

What should I do with the report?

Send it to whoever looks after your email. Every item that needs attention has a plain next step written for them. If you would rather we handled it, use the button at the end of the report.