SPF / DKIM / DMARC Checker
Validate email authentication records for any domain. Check SPF, DKIM, and DMARC configuration.
Features
Comprehensive email authentication validation
SPF Validation
Check SPF records for syntax, mechanism count, and common misconfigurations like +all.
DKIM Discovery
Scan 12 common DKIM selectors including Google, Microsoft, Mailchimp, and Amazon SES.
DMARC Analysis
Parse DMARC policy, reporting addresses, alignment settings, and percentage coverage.
Overall Score
Get an instant Good/Fair/Poor rating based on your email authentication configuration.
Issue Detection
Identify problems like missing records, permissive policies, and DNS lookup limits.
How It Works
Enter Domain
Type any domain name to check its email authentication records.
DNS Analysis
We query TXT records for SPF, scan DKIM selectors, and check DMARC configuration.
Review Results
Get detailed findings with parsed records, issues, and an overall authentication score.
Frequently Asked Questions
What is SPF and why does it matter?
SPF (Sender Policy Framework) is a DNS TXT record that specifies which mail servers are authorized to send email on behalf of your domain. Without SPF, spammers can forge your domain in the From address. Email providers use SPF to verify sender legitimacy.
How does DKIM improve email deliverability?
DKIM (DomainKeys Identified Mail) adds a digital signature to outgoing emails using a private key. Receiving servers verify it against the public key published in DNS. This proves the email was not tampered with in transit and truly originates from your domain.
What DMARC policy should I use?
Start with p=none to monitor without blocking, then move to p=quarantine (sends failures to spam), and finally p=reject (blocks failures entirely). Always configure rua= to receive aggregate reports so you can monitor authentication results.
Why are some DKIM selectors not found?
We check 12 common selectors used by popular email services (Google, Microsoft, Mailchimp, etc). Your domain may use a custom selector not in our list. A DKIM record only needs one valid selector to work properly.