✉Email DNS Checker

A TXT record listing which servers may send mail for your domain (v=spf1 …). Receivers reject or flag mail from anywhere else. End it with -all (hard fail) once you’re confident.

Your mail server signs each message with a private key; the matching public key lives in DNS at selector._domainkey.yourdomain. Receivers verify the signature so the message can’t be tampered with.

Ties SPF and DKIM together and tells receivers what to do with failures: p=none (just report), p=quarantine (spam folder), or p=reject (drop). Start at none with rua= reports, then tighten.