Security Updated July 2026 · refreshed monthly

How secure is Australian email?

SPF, DMARC and DNSSEC — how much of the .au namespace is actually protected against spoofing and hijacking, measured domain by domain.

Publish SPF

45.8%

1,752,405 domains

Publish DMARC

22.2%

849,130 domains

DNSSEC-signed

1.09%

▲ +5,320 (+14.7% MoM)

Authentication

SPF, DMARC & DNSSEC adoption

Email authentication is widely deployed (SPF 45.8%, DMARC 22.2%) — but DNSSEC lags badly at 1.1%, roughly a quarter of the global average.

DNSSEC

DNSSEC signing across .au

Just 1.16% of registered .au is DNSSEC-signed — the namespace's weakest link.

Historical trend

DNSSEC-signed domains over time

▲ +5,320 (+14.7%) since the previous edition. The full month-by-month series is available to subscribers.

Get historical data →

Method. Figures are the latest available snapshot (July 2026), refreshed each edition. Registry figures come from a full RDAP sweep of the registered .au universe (3,798,553 names); infrastructure figures (hosting, email, DNS, builders, authentication) come from a DNS-enrichment sweep and use heuristic provider labels (ASN / MX / nameserver patterns), so treat them as indicative shares.

Aggregate, domain-level data only — no registrant personal information. Not an auDA publication.