American Water is the largest publicly traded water and wastewater utility in the U.S., and amwater.com has been its online home for 30 years. That long, consistent domain history is a strong signal that you're on the real site, not a copycat. For a utility that handles account logins and payments, the security measures here are appropriate: HTTPS is enforced, clickjacking is blocked, and no malware has been detected. While the site lacks some modern extras like social media links on the homepage, that's common for utilities — they don't need an Instagram feed next to your bill pay button. If you're an American Water customer, you can safely use this site to manage your account. The privacy policy and terms of service are clearly posted, and the company identity is transparent. For peace of mind, always verify you're at the correct URL before entering credentials, but in this case, the data strongly supports legitimacy.
In plain English
You can trust amwater.com. It's been the official website of American Water for decades, a publicly traded utility company. Strong security and a clean reputation back that up.
Where the score comes from
Solid setup for a utility handling customer accounts: modern encryption, enforced HTTPS, and clickjacking protections are all in place. No malware or phishing flags.
This domain has been registered for over 30 years, which is excellent for a major utility. The company is publicly traded and well known, and the presence of a verified trademark (BIMI) adds an extra layer of identity confirmation.
Clean history across blacklists and Google's threat database. The Wayback Machine shows snapshots stretching back 28 years, confirming long-standing legitimate operation.
Clear contact information and a detailed About page are present. The site openly describes who runs the company and what they do. No social media links on the homepage, but that's not unusual for a utility.
Privacy policy and terms of service are available, which is appropriate for a site that handles billing and account access. No EU-style legal disclosure page, but the company is US-based and not subject to those requirements.
Strong email authentication (DMARC reject) and a properly configured DNS setup. The site is hosted on AWS, a reputable provider. Minor neutral items like missing DNSSEC are not concerning for this type of site.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →