Check your domain's SPF, DKIM and DMARC records in seconds — plus MX, BIMI and MTA-STS. Free, fast, and no data stored.
Sender Policy Framework lists which servers may send mail for your
domain. We validate syntax, the all qualifier, and
expand every nested include into a full tree so you can
see all DNS lookups counted against the limit of 10.
DomainKeys Identified Mail cryptographically signs your messages. We probe the common provider selectors and report key type, strength, and revocation.
DMARC ties SPF and DKIM together and tells receivers what to do with failures. We break down your policy strength, aggregate and forensic reporting, failure options, and alignment.
We also confirm your mail exchangers resolve, and surface modern extras like BIMI brand logos, MTA-STS transport security, and DNSSEC signing of your DNS.