Is your domain ready for Microsoft 365?
Check the public settings behind your business email. See what passes, what needs attention and what each result means.
Free results, no signup. No passwords. No changes to your domain.
Read-only check. We look up public DNS records and leave your settings untouched.
What the five checks mean
Built for businesses using Microsoft 365. Other email providers, mail filters and hybrid setups may need a closer look, not a change.
- Email delivery
- Where incoming email is sent, and whether it points to Microsoft 365 or another service.
- Approved senders
- Which services are allowed to send email using your domain.
- Email signing
- Whether Microsoft's public signing records are available to help recipients verify your email.
- Impersonation policy
- What you ask receiving providers to do with email that fails your domain's identity checks.
- Outlook connection
- Whether Outlook can find Microsoft's standard connection settings for your domain.
Technical record names for your IT provider
Email delivery: MX. Approved senders: SPF. Email signing: DKIM. Impersonation policy: DMARC. Outlook connection: Autodiscover.
This checks public domain records only, using Google Public DNS. It does not access your accounts, devices or internal systems. It cannot confirm mailbox settings, multi-factor authentication or whether outgoing email is actually signed. A passing result does not guarantee that your business is secure.
