How to Check If Your Website Has SPF and DMARC Records (And Why Email Security Matters)

Someone is probably sending email from your domain right now. Not you -- someone pretending to be you. Without SPF and DMARC records, anyone can send an email that looks like it came from yourcompany.com . Phishing attacks, fake invoices, password reset scams -- all using your domain name, all landing in your customers' inboxes. The fix takes five minutes. Here's how to check if you're protected, and what to do if you're not. What Are SPF and DMARC? SPF (Sender Policy Framework) SPF is a DNS record that says "these servers are allowed to send email for my domain." When someone receives an email claiming to be from your domain, their mail server checks your SPF record. If the sending server isn't on the list, the email gets flagged or rejected. An SPF record looks like this: v=spf1 include:_spf.google.com include:sendgrid.net -all This says: Google and SendGrid can send email for us. Everyone else should be rejected ( -all ). DMARC (Domain-based Message Authentication, Reporting & Confo