TesseraFree Email Check
Find out in seconds whether your domain's email is protected from spoofing and why your emails end up in spam. We check SPF, DKIM, DMARC, MTA-STS and TLS-RPT and tell you which records to publish.
Free, no sign-up. We only read public DNS records, the same ones any mail server reads: no scanning and no messages sent.
What about the website?
The Email Check only looks at email. The Quick Check analyses the website: security headers, TLS, known vulnerabilities and an application scan, with a PDF report in minutes.
Discover the Quick CheckWhy it matters
SPF, DKIM and DMARC tell mail servers which emails really come from your domain. Without them, anyone can send emails that look like yours: fake invoices, payment requests, phishing aimed at your customers. And your real emails risk landing in spam: Gmail and Microsoft require SPF, DKIM and DMARC from bulk senders.
Under the GDPR (art. 32) and NIS2, communication security is part of the technical measures to adopt and verify.
What we check
| Check | What it verifies |
|---|---|
| MX | Whether the domain receives email and on which servers. |
| SPF | A single record, with a protective final "all", within the 10 DNS lookup limit. |
| DMARC | The policy (none, quarantine, reject), the percentage, subdomains and the reporting address. |
| DKIM | Keys published under the most common selectors and their length. |
| MTA-STS and TLS-RPT | Mandatory encryption for inbound mail and reports on encryption problems. |
Limits
DKIM is looked up among the most common selectors: if your provider uses another one, the check cannot find it, and the result says so. We do not connect to mail servers and do not check blacklists, email content or DNSSEC. The score uses the same scale as the Quick Check (methodology).