Free tool
Type a domain. We read its public DNS records and tell you which of MX, SPF, DKIM, DMARC, MTA-STS and TLS-RPT are in place and which are missing or wrong. Nothing is sent to the domain and nothing is stored.
What this checks
MX tells the world where to deliver mail for the domain. SPF lists the servers allowed to send as the domain. DKIM is the key used to sign outgoing mail. DMARC tells receivers what to do when SPF and DKIM both fail and where to send reports. MTA-STS and TLS-RPT are the newer, optional records about encryption on the way in. The check reads these records the same way a receiving mail server does; it does not send mail, log in anywhere or store what you type.
Related tools
Mailboxes in Luxembourg
NovaNode Mail gives you the MX, SPF, DKIM and DMARC records to copy into your DNS, with mailboxes stored in Luxembourg.