What does the Mail Check verify?

Our free Mail Check analyzes the complete email security of your domain. You get a comprehensive overview of three important areas: sender protection, transport encryption and DNS security.

Sender Protection: SPF, DMARC and DKIM

SPF (Sender Policy Framework) specifies which mail servers are allowed to send emails for your domain. DMARC (Domain-based Message Authentication) determines what happens with emails that fail this check. DKIM (DomainKeys Identified Mail) adds a digital signature that proves the email really came from you.

Transport Encryption: STARTTLS and TLS

When a mail server sends an email to another, the connection should be encrypted. STARTTLS activates encryption, and TLS 1.2+ ensures secure encryption. Our tool checks each mail server individually and also shows the certificate being used.

DNS Security: DNSSEC and DANE

DNSSEC protects DNS records from manipulation. DANE goes one step further and links TLS certificates with DNS records (TLSA records). This ensures your mail server uses the correct certificate — verified via DNSSEC.