Help
How healthcheck.email works, and email made plain.
Getting started
- What healthcheck.email checks The public records we read, the three questions we answer, and what we never touch.
- Reading your report Status words, readiness levels, severities, and how sure we are about each finding.
- Daily checks and alerts Verify a domain once, and we check it every day and email you when something changes.
- Sharing a report and adding dates to your calendar Read-only share links, Markdown downloads, and a calendar of the dates that matter.
- Who can do what The four roles in a workspace, and what each one can do.
- "Email going to spam or not arriving: what to check" A few questions that narrow it down, and what to send your email provider if you need their help.
- "How to find a message's headers" Where each mail app keeps the technical record of a message, so you can check it or send it to someone who can help.
- "Testing a message with your inbox" Send or forward a message to your domain's intake address and see how it authenticates, with a score and the reasons behind it.
- "Seeing who sends as you" Turn on DMARC reports to see the services sending mail as your domain, how much each sends, and whether it passes DMARC.
Email basics, without jargon
- How email proves who sent it Why anyone can write your address in the From line, and the three records that stop them.
- SPF, DKIM and DMARC on one page What each record looks like, where it lives, and the mistakes we see most.
- Moving to p=reject safely A step-by-step path from no DMARC to refusing fakes, without blocking your own mail.
- Why mail lands in spam Authentication gets you in the door. Reputation, list hygiene and content decide the inbox.
Known quirks
How email services really behave, and what that means for your report.
Glossary
Every term we use, in a sentence or two.
ARCAuthentication-ResultsBannerBCLBIMIBlocklistDKIMDKIM selectorDMARCDMARC reports (rua)DNSDNSSECMTA-STSMXNameserverNull MXParked domainReceived headerRegistrarReverse DNSSCLSenderSPFSPF includeSTARTTLSSubdomainTLS-RPT