Email security

DKIM signing key published

SPF, DMARC, DKIM, MTA-STS: protection against spoofed mail in your name.

Why it matters

Unsigned mail is easier to forge and more likely to be filtered as spam; DMARC then depends on SPF alone, which breaks on forwarding.

How to fix it

Quick fix · under 1 hour
  1. Enable DKIM signing in your mail provider's admin console.
  2. Publish the TXT record it gives you, then turn signing on.
  3. If you already sign with a custom selector, you can ignore this item.
Test this now, free: SPF, DMARC & DKIM checker - no sign-up.

How we test it

The check runs from the public internet as part of every scan, read-only and without touching your data. If it fails, your report shows the evidence that proves it - the record, header, file or banner we observed - together with the fix above, tailored to the issue we found.

Does your domain pass this check?

Run all 97 checks in about a minute. Your first scan is free, with the complete fix for your most urgent finding.

Scan your domain free