Free email DNS tool
SPF DKIM DMARC checker
Check email authentication records and catch DNS setup issues before QA or production delivery.
When to use this checker
Use this tool when onboarding emails, passwordless login messages, or transactional tests appear in spam, fail authentication, or come from a newly configured sender domain.
What the results mean
- SPF lists servers allowed to send mail for the domain.
- DKIM checks a selector-specific public signing key.
- DMARC defines alignment policy and reporting behavior.
- Missing records do not prove abuse, but they deserve review before launch.
Related workflows
TempMailito angle
Create disposable inboxes to test email flows, then inspect DNS and headers when delivery behavior does not match expectations.
View API docsFAQ
Email authentication checker questions
What do SPF, DKIM, and DMARC do?
SPF authorizes sending servers, DKIM signs messages with a domain key, and DMARC tells receivers how to handle mail that fails authentication.
Do I need a DKIM selector?
Yes. DKIM records live under selector._domainkey.example.com, so the checker needs a selector such as default, google, k1, or s1.
Why check these records during email testing?
Authentication records help QA and engineering teams catch sender setup issues before transactional or onboarding emails reach real users.