Free Tools
Email authentication tools
Diagnose, understand, and validate your email authentication setup. No account required.
One box for every domain check →
Type a domain for a full report, or scope it with dmarc:, spf:, dkim:, mx:, mta-sts:, tls-rpt:, bimi:, blacklist:, dns:, ptr:, dnssec:, or whois:.
Get set up
Email Authentication Setup Wizard
Configure SPF, DKIM, and DMARC step by step. Generates your DNS records and verifies they're live.
DMARC Record Generator
Set your policy, alignment mode, and reporting addresses. Get a ready-to-copy DNS TXT record.
DKIM Key Formatter
Paste a DKIM public key to get a properly formatted TXT record. 2048-bit keys split automatically.
Check your domain
DMARC Record Checker
Enter any domain to see its _dmarc TXT record, parsed tags, health grade, and recommendations.
SPF Record Checker
See any domain's SPF record, parsed mechanisms, DNS lookup count against the RFC 7208 limit, and recommendations.
SPF Complexity Score
Count DNS lookups, visualize the full include chain, and see if you're at risk of exceeding the 10-lookup limit.
SPF Record Flattener
Collapse any SPF include chain into a flat record with ip4/ip6 ranges only. Copy and paste to fix SPF permerror.
Email Authentication Checker
Check all major authentication signals (DMARC, SPF, DKIM, MTA-STS, TLS-RPT, BIMI, MX, PTR) and get an A–F grade.
Gmail & Yahoo Compliance Checker
Check whether your domain meets the 2024 Gmail and Yahoo bulk sender requirements: DMARC, SPF, DKIM, and unsubscribe.
BIMI Record Checker
Check whether a domain has BIMI configured, which email clients display its logo, and whether DMARC prerequisites are met.
Email Blacklist Checker
Check any domain or IP against 10 public DNS blocklists. See which servers are listed and which are clean.
Domain Spoofability Score
See how easy it is to spoof your domain. Scores from Critical to Low based on DMARC enforcement, SPF, and DKIM.
DNS Record Lookup
Query any DNS record type (A, AAAA, MX, TXT, NS, CNAME, SOA, CAA) for any domain and see the raw resolver response.
Reverse DNS (PTR) Lookup
Look up the PTR record for any IP address to verify reverse DNS is set and matches the forward record.
DNSSEC Checker
Verify DNSSEC is enabled and the full chain of trust from root to your domain is valid and correctly signed.
WHOIS Lookup
Retrieve registrar, registration date, expiry date, and nameserver information for any domain.
Analyze & diagnose
DMARC XML Report Analyzer
Paste or upload a DMARC aggregate report and get a readable breakdown of senders, alignment results, and flagged spoofing.
Email Header Analyzer
Paste raw email headers to see DKIM, SPF, and DMARC results, the delivery path, and red flags. Parsed in your browser.
DMARC Policy Simulator
Input a policy and message scenario. See exactly what a receiving mail server would do: evaluation, verdict, and disposition.
BEC Exposure Calculator
Estimate your Business Email Compromise exposure by company size, industry, and invoice amount. Methodology from FBI IC3 and Verizon DBIR.