Domain email security checker.
Enter a domain and we'll check SPF, DKIM, and DMARC in one pass, live DNS lookups, right in your browser. No email address needed, no data stored.
Three email authentication checks, in one pass.
SPF, DKIM, and DMARC are three separate DNS records that together determine whether email pretending to be from your domain gets blocked or lands in someone's inbox looking legitimate. Most businesses have never checked whether all three are actually configured, correctly, at the same time, because doing it by hand means several separate DNS lookups and enough technical detail to lose an afternoon.
This tool runs all three checks in one pass against live DNS records for whatever domain you enter, right in your browser, no email address needed and nothing stored anywhere. It returns a plain-English scorecard: which of the three are present, which are missing, and specific details about what was found, or wasn't.
DKIM is the trickiest of the three to check automatically because, unlike SPF and DMARC, there's no single fixed DNS location for it, it lives at a per-provider "selector" address that varies by email platform. This tool checks the roughly 20 most common selectors used by Microsoft 365, Google Workspace, and most major email platforms, which covers the large majority of real-world setups, but if your provider uses a custom selector, DKIM may show as not found here even though it's actually configured correctly.
DKIM has no single DNS record to look up, it lives at a per-provider "selector" address. We check the ~20 most common selectors (Microsoft 365, Google Workspace, and most major email platforms). If your setup uses a custom selector, it may show as not found here even though it's configured correctly, check with your email provider for the exact selector name to be certain.
Keep reading.
Get a free read on your email security.
We'll walk through what's actually configured, what's missing, and what it would take to close the gaps.