Free Email Privacy & Security Checker
Inspect MX, SPF, DMARC and a supplied DKIM selector, with an optional, consent-based search of a breach-data provider.
Check email domain
Inspect a mail domain’s MX, SPF, DMARC, and a DKIM selector you supply. You can optionally search a configured breach-data provider.
How to use this tool
Follow these steps to get observations you can interpret and act on.
Enter an email address
Use an address you own or are authorized to inspect. The standard checks use its domain to inspect mail DNS records.
Add optional evidence
Supply a DKIM selector from an actual email header if you have one. Enable breach search only if you consent to sending the full address to the provider.
Review DNS and breach results separately
Read the record details and provider coverage notes. A DNS declaration and a breach lookup answer different questions.
How the email privacy checker works
The email checker extracts the mail domain from your address and looks up its published DNS records. The optional breach search is a separate request to Leak-Lookup; it is not required to inspect mail-domain configuration.
DNS declarations are observed facts, not proof of delivery or complete mail security. The tool does not invent domain ages, exposure records, or breach matches.
Understanding your results
- MX identifies published mail routing. SPF and DMARC describe domain policies; their presence alone does not prove correct delivery or complete protection.
- DKIM records are selector-specific. Without a selector from a real message, the tool cannot assess all signing keys for a domain.
- No breach records returned means no matches in the queried provider data at that time. It does not prove the address has never been exposed.
Privacy & important limitations
- The email is submitted to the application server. DNS lookups send only the extracted domain; an opted-in breach search sends the full address to Leak-Lookup.
- The configured free breach allowance is shared across visitors: 10 searches per day. Results may be cached for up to one hour; provider limits or missing coverage are reported.
Measured findings include their source and scope. An unavailable check is never counted as a pass, a threat or a score.
Frequently asked questions
Why do I get “No records returned”?
The provider did not return matching records for that search. Coverage is incomplete and the free allowance is limited, so treat the response as a scoped observation.
Can this verify my mailbox or read my messages?
No. The tool does not sign in to your mailbox, read email or verify delivery. It inspects public DNS and the optional provider response.