Do your emails actually arrive?
SPF, DKIM, DMARC: three invisible settings decide whether your messages land in the inbox or in spam, and whether a fraudster can impersonate your address. Let's check yours.
Reading the public DNS records of your domain. No email sent, no data kept.
Routing
They state where to deliver email addressed to your domain. Without them, you receive nothing.
Authentication
The list of servers allowed to send on your behalf. Beyond 10 lookups, servers give up on the check.
The final rule: "-all" rejects unauthorised senders, "~all" tolerates them, "+all" lets everyone through.
A cryptographic signature proving the message really comes from you and has not been altered.
It tells servers what to do with messages that fail the checks, and reports impersonation attempts back to you.
"p=none" only observes; "quarantine" sends to spam; "reject" blocks: the real anti-impersonation shield.
Hardening
Signs your DNS records so your domain cannot be hijacked along the way.
Enforces an encrypted connection for servers writing to you, protection against interception.
Reports encryption problems encountered by those sending you messages.
Shows your logo next to your emails at supporting providers. Requires a strict DMARC.