Check your domain
Electryo reads the SPF and DMARC records you publish. A forged message is much harder to deliver when DMARC is p=reject.
Run the check
Sign in to run the check.
What the records do
SPF says which servers may send mail as you. DKIM is a signature on the message. DMARC tells receiving servers what to do when those checks fail - none, quarantine, or reject. p=reject is the policy that stops other people sending mail that looks like yours.
DMARC is one layer. These are the others.
01
Phishing-resistant sign-in
A passkey or a hardware key gives a successful phish nothing it can reuse.
02
SPF, DKIM, and DMARC
On your own domain, DMARC at p=reject is what stops other people sending mail as you.
03
A password manager
It will not fill a password on a domain that only looks like the real one.
04
Patching and endpoint protection
Mail scanning does not run an attachment. A current device and an endpoint agent do.
05
Calendar invitations from known senders
In Google Calendar, set Add invitations to my calendar to only invitations from known senders. A junked email can still plant a meeting; unknown organisers should not appear on the calendar until you accept them.