Send-mail authentication check

Is your domain pretending to be someone else?

Enter any sending domain — we pull the SPF, DKIM and DMARC records straight from authoritative DNS, flag every misconfiguration against RFC 7208, RFC 6376 and RFC 7489, and give you copy-paste record fixes.

Check any domain
Paste the domain you send mail from — we'll resolve the SPF record at its root, the DKIM record at the selector you provide, and the DMARC record at _dmarc, then grade each against RFC 7208, RFC 6376 and RFC 7489.
Advanced — DKIM selector tuning

Defaults to default with google, k1, s1, s2, selector1, selector2 as fallbacks — covers Google Workspace, Office 365, SendGrid, Mailgun and most ESPs out of the box.

Audit report
Submit a domain above to run an authentication check.

We'll resolve the SPF record at the domain root, the DKIM record at <selector>._domainkey, and the DMARC record at _dmarc — then grade each against the relevant RFC.

Remediation
No issues to remediate yet.

Every flagged misconfiguration ships with a one-click copy-paste DNS record pair (host + value) so you can publish the fix straight from your provider.