Verify your domain's email authentication records in one lookup. Get a security score, find misconfigurations, and protect against email spoofing.
How to Use This Tool
Enter your domain — Type a domain name (e.g. example.com) in the search box, or click a quick-try chip
Click "Check Records" — The tool queries SPF, DKIM, and DMARC DNS records in real time
Review your security score — See an overall grade and score based on your email authentication setup
Explore each protocol tab — Click SPF, DKIM, or DMARC for detailed record analysis and recommendations
Check custom DKIM selectors — If your provider uses a non-standard selector, enter it manually for a targeted lookup
Common Use Cases
Why are my emails going to spam? Check whether SPF, DKIM, and DMARC are all properly configured — missing records are a top cause of deliverability problems
How do I prevent email spoofing of my domain? Verify your DMARC policy is set to "quarantine" or "reject" and that SPF and DKIM align correctly
Did my email provider's DNS setup work? After configuring Google Workspace, Microsoft 365, or another provider, run a check to confirm all authentication records are live
Sender Policy Framework defines which mail servers are authorized to send email on behalf of your domain. Receiving servers check SPF to detect forged sender addresses.
🔑 DKIM
DomainKeys Identified Mail adds a cryptographic signature to outgoing emails. The recipient server verifies the signature using the public key published in DNS, proving the email was not tampered with.
🛡️ DMARC
Domain-based Message Authentication, Reporting and Conformance ties SPF and DKIM together. It tells receiving servers what to do when authentication fails and provides reporting so you can monitor abuse.
