Authentication

SPF/DKIM/DMARC Checker

Verify email authentication DNS records instantly. Check SPF, DKIM, and DMARC configuration for any domain.

How to use

  1. Enter your domain name (e.g., yourdomain.com)
  2. Click 'Check Authentication'
  3. Review SPF, DKIM, and DMARC record status
  4. Follow recommendations to fix any issues

Frequently asked questions

What does 'softfail' mean in SPF?

Softfail (~all) tells receiving servers to accept but flag emails from unauthorized IPs. It's less strict than hardfail (-all) but provides some protection.

How do I find my DKIM selector?

Your DKIM selector is typically provided by your email service (e.g., 'google' for Google Workspace, 'selector1' for Microsoft 365). Check your provider's documentation.

What DMARC policy should I use?

Start with p=none for monitoring, move to p=quarantine after analyzing reports, and finally p=reject for maximum protection once you're confident in your configuration.