EMAIL SECURITY CHECKER

If unknown, leave blank — we’ll try a few common selectors.
Domain:
Restart
SPF
No SPF (v=spf1) TXT record found.

Recommendations

  • No SPF found. Publish one TXT record only, e.g.: v=spf1 a mx ip4:<your-ip> include:<vendor-domain> -all
  • Keep exactly one SPF TXT at the root. Multiple SPF records break validation.
  • End with ~all (monitoring) or -all (strict) once you are confident.
DKIM
No DKIM TXT found. If you know the selector, enter it and try again.

Recommendations

  • No DKIM found. Generate 2048-bit keys and publish at selector._domainkey.<domain>.
  • Use a clear selector (e.g., selector1) and rotate keys annually.
  • Ensure your MTA is signing outbound mail with the matching selector.
DMARC
No DMARC (v=DMARC1) TXT found at _dmarc..

Recommendations

  • No DMARC found. Start with: v=DMARC1; p=none; rua=mailto:postmaster@<domain>; adkim=r; aspf=r
  • After monitoring, move policy to p=quarantine then p=reject, and set pct=100.
Back to Lemon-Web