Plain-English guides to email security, DMARC, and protecting your domain - no jargon, no filler.
Explainer
DKIM puts a tamper-proof seal on every email your domain sends - a cryptographic signature any receiver can verify. Here is how it works in plain English, why keys need rotating, and what it means when DKIM fails.
Sector guide
An email from your accountancy practice gets acted on - that trust is exactly what criminals exploit in payroll diversion and fake-invoice fraud. Here is what DMARC protects against for an accounting firm, what it cannot do, and where ICAEW and ACCA guidance fits.
Explainer
SPF is a public guest list of the servers allowed to send email for your domain. It is simple in concept and surprisingly easy to break in practice. Here is how it works, the 10-lookup limit that catches everyone out, and why SPF alone will not protect you.
Sector guide
If your organisation handles NHS patient data, the Data Security and Protection Toolkit already expects you to take email security seriously - and DMARC is part of that picture. A plain-English guide for practice managers, with no technical background assumed.
Explainer
Thousands of UK domains have a DMARC record set to p=none - and their owners believe they are protected. They are not. Here is what p=none really does, why it exists, and how to progress safely to a policy that blocks spoofed email.
Sector guide
Email fraud against law firm clients is not a hypothetical - the SRA has documented millions in client losses, most of it "Friday afternoon fraud". Here is what DMARC genuinely protects against, what it does not, and what the SRA's guidance actually says.
Explainer
DMARC is the standard that tells the world's mail servers what to do with email pretending to be from your domain - and reports back on what they saw. Here is how it works, in plain English, with no diagrams to decode.
News & analysis
NCSC Mail Check retired on 31 March 2026. A step-by-step guide to migrating your DMARC and TLS reporting to a replacement, without overpaying.
Transparency
Before pointing your DMARC reports at any provider, you should know exactly what you are handing over. Here is the complete answer for SealedMail: what arrives, what is stored, for how long - and the email content and personal data that were never in the reports at all.
Explainer
Hundreds of shared registers quietly grade your domain’s reputation, and the world’s mail servers consult them millions of times a second. Here is how blacklisting happens, what it does to your email, and how to find out - for free - whether you are listed.
We use privacy-friendly, self-hosted analytics and a sampled, masked session-replay tool to find usability problems. Nothing is shared with third parties, and these load only if you accept. See our Privacy Policy.