SPF, DKIM & DMARC Checker
Check whether a domain is set up to stop email spoofing. The tool reads SPF, DMARC, DKIM and MTA-STS records through DNS-over-HTTPS, explains each finding and gives the domain a score.
Common selectors are tried automatically. Add the exact selector from your mail provider for a complete DKIM result.
Frequently asked questions
What do SPF, DKIM and DMARC do?
SPF lists the servers allowed to send mail for a domain. DKIM adds a cryptographic signature so receivers can check the message was not altered. DMARC tells receivers what to do when SPF or DKIM fails and where to send reports.
Why does DKIM need a selector?
The public key lives at selector._domainkey.yourdomain. The selector is chosen by your mail provider, so the tool tries six common names and lets you add the exact one.
Is p=none a passing policy?
p=none only asks receivers to report failures; it does not protect the domain. Move to p=quarantine, then p=reject, after confirming legitimate senders pass.
Are my queries private?
Queries go from your browser to public DNS-over-HTTPS resolvers — Cloudflare first, with Google as a fallback. Nothing is proxied through or stored by Complex To Easy.
Related tools
More from Networking
Build custom software with us
From internal tools to full platforms — we deliver end to end.