Email Authentication Checker

Enter a domain or website URL to analyse.

The Email Authentication Checker reads the DNS records that decide whether mail from your domain is accepted or filtered: SPF, DKIM and DMARC. Together they tell receiving servers which systems may send on your behalf and what should happen to messages that fail the test.

What the check returns

Enter a domain and the tool queries public DNS, then prints each record in full so you can inspect the individual mechanisms and tags instead of a simple yes or no.

SPF: the TXT record listing the servers allowed to send mail for the domain
DMARC: the policy published at _dmarc, including the p= handling rule and reporting addresses
DKIM: a lookup across common selectors such as default, google, selector1 and k1
The raw value of every record found, ready to compare with your mail provider instructions

DKIM is probed on widely used selector names only. If your provider uses a custom selector, the key can exist even though the check reports nothing, so confirm the selector name in your mail settings. A missing SPF or DMARC record, on the other hand, is a real gap: without them anyone can put your domain in the sender line.

Frequently asked questions

What does the Email Authentication Checker do?

It looks up the DNS records that authenticate your outgoing mail — SPF, DKIM and DMARC — and shows their full values. In one check you see which systems may send on your domain's behalf and what receiving servers do with messages that fail.

Why do SPF, DKIM and DMARC matter?

They decide whether mail from your domain lands in the inbox or the spam folder. SPF lists allowed sending servers, DKIM signs messages cryptographically, and DMARC tells receivers how to treat failures — together they protect deliverability and block spoofing.

Is the check free and do I need to register?

Yes, the Email Authentication Checker is completely free and requires no account. Enter any domain and run the lookup as often as you need, for example after changing mail providers or editing DNS records.

What should I do if a record is missing?

Add the missing record in your domain's DNS settings. Start with SPF listing your mail providers, enable DKIM signing in your email service, then publish a DMARC policy — beginning with p=none to monitor before enforcing stricter rules.

What the check returns

Enter a domain and the tool queries public DNS, then prints each record in full so you can inspect the individual mechanisms and tags instead of a simple yes or no.

SPF: the TXT record listing the servers allowed to send mail for the domain
DMARC: the policy published at _dmarc, including the p= handling rule and reporting addresses
DKIM: a lookup across common selectors such as default, google, selector1 and k1
The raw value of every record found, ready to compare with your mail provider instructions