What you’ll need
A public domain; provide a DKIM selector if you want its record inspected.
Understand published SPF, DKIM and DMARC records.
Free to use · No saved inputsA public domain; provide a DKIM selector if you want its record inspected.
Bounded DNS-only queries and syntax/policy checks; draft DMARC/SPF records.
DNS health cannot prove inbox delivery or authenticate a particular message. No DNS changes are made.
Understand published SPF, DKIM and DMARC records. A public domain; provide a DKIM selector if you want its record inspected. Review the supported scope below before adding a large file or using the result in a campaign.
Open Email Authentication Checker & Record Builder and inspect its input labels. A public domain; provide a DKIM selector if you want its record inspected.
Read the DNS disclosure, enter a public domain and confirm the public check. No message, mailbox password or private key is needed.
Run the workflow, read any warnings and inspect the output. Download the result only after checking the values or file preview; clear the workspace when finished.
Bounded DNS-only queries and syntax/policy checks; draft DMARC/SPF records. DNS health cannot prove inbox delivery or authenticate a particular message. No DNS changes are made.
Check a small representative input first. For exported assets, reopen the downloaded file in its intended application before using it in production.
DNS health cannot prove inbox delivery or authenticate a particular message. No DNS changes are made.
The public domain and selector are sent to this server and its DNS resolver. The application does not save the request or report. Hosting may process ordinary request metadata.
Check the input format, units and limits. DNS health cannot prove inbox delivery or authenticate a particular message. No DNS changes are made. An unavailable result does not establish that a campaign, document or email address is valid or invalid.