Blog · Email
Email Deliverability
Password resets, spam folders, domain trust, and why important website emails should never look suspicious to inbox providers.
A missing password reset is a trust problem
When password reset emails never arrive, users do not diagnose DNS records. They decide the site is broken. If the message lands in spam, the result is not much better.
Treat transactional emails like password resets, receipts, and notifications as infrastructure. They need a reliable sender, correct authentication, and monitoring so you know when something changes.
Do not teach inboxes to distrust you
Your site can make legitimate mail look suspicious by sending from the wrong domain, skipping authentication, mixing marketing and transactional mail, or sending vague messages.
Marking everything as safe and hoping doesn't work. Send mail in a way that actually earns trust.
The fix is usually operational
SPF, DKIM, and DMARC matter, but deliverability is also about process: who owns the sending domain, which service sends each type of email, and how you find out when something fails.
Know the path each kind of email takes from your site: contact forms, password resets, receipts, and internal notifications.
Check your own domain, right now
You can check your own domain right here. This is the same check we run at the start of every audit: type your organization's domain and it runs live on this page.
Can a stranger send email in your organization's name?
A "please renew your membership" note to your members. A payment request to your finance team, signed with your director's name. If your domain isn't locked down, a stranger can send both. And to the person receiving them, they look completely real. See where yours stands. Free, about three seconds, nothing stored.
The technical specifics (for your IT contact)
This is one of roughly forty things a full Website Operations Audit checks: performance, accessibility, security, and more. In plain English, with none of the jargon above.
Get the full pictureHow this is built: the check runs on our own server. It makes a few DNS lookups against your domain's published records and grades them the way inbox providers read them. Nothing is stored, and no third-party service is involved. This page is also a product demo: we build tools like this into our clients' sites too.