Can someone send email as your domain?
Your domain's SPF and DMARC records, the DNS settings that tell mail providers who may send email as your domain and what to do with messages that fail.
Why it matters
Without them, anyone can send email that appears to come from your domain: fake invoices, password reset lures or messages to your customers. Missing records also make your own email more likely to land in spam.
How a survey checks it
Passive check: part of every free survey.
We read the public SPF and DMARC records of your registrable domain. A missing record matters most when your domain receives email. Shared platform domains, such as your-app.lovable.app, are skipped because their owner manages them.
How to fix it
- Publish one SPF record listing every service that sends email for you, ending in ~all or -all.
- Publish a DMARC record, starting with p=none to collect reports, then move to quarantine or reject once your own email passes.
- Set up DKIM signing in each service that sends your email.
Prefer us to do it? Ask for a fix quote
Common questions
I do not send email from my domain. Do I need these?
Yes, especially then. A record saying that nothing sends email for your domain stops others using it.
Can I have two SPF records?
No. Two SPF records make both invalid. Merge them into one.