ToolPremier Logo
ToolPremier

Home  ›  Domain & Network Tools  ›  SPF/DKIM/DMARC Email Checker

SPF/DKIM/DMARC Email Checker

Test your domain’s email authentication records to prevent spoofing and improve inbox deliverability. Inspect SPF mechanisms, validate DKIM selector keys, and evaluate DMARC policy enforcement in one comprehensive report.
✓ Free✓ No signup✓ Privacy first✓ Runs in your browser
SPF/DKIM/DMARC Email Checker - ToolPremier
Popular Domains:
🛡️
No Domain Analyzed Yet

Enter a domain name above to inspect its SPF, DKIM, DMARC, and MX records. The tool verifies spoofing vulnerability and checks RFC compliance client-side.

0 / 100
Security Level
-

-

SPF Record -

-

-
DKIM Signature -

-

-
DMARC Policy -

-

-
MX Mail Servers -

-

-
Raw SPF Record (TXT)
None detected
Mechanism / Tag Qualifier Value / Host Impact / Description
Raw DMARC Record (_dmarc TXT)
None detected
Tag Configured Value Meaning Security Impact
Raw DKIM Record
No DKIM selector query executed
Parameter Detected Setting RFC Specification Details
Priority Mail Exchanger Host Provider Detection Status
Record Name TTL Raw TXT Data Action

SPF, DKIM & DMARC Email Security Checker · 100% Client-Side Anycast DoH Diagnostics · ToolPremier

How it works

Get it done in three steps

1. Enter your domain name

Type your apex domain into the search bar, with the option to specify custom DKIM selectors or test mail server hosts.

2. Run the security inspection

Click the check button to query public DNS authentication records across SPF, DKIM, and DMARC protocols.

3. Analyze the security breakdown

Review detailed status badges, policy warnings, and actionable recommendations to fix authentication flaws and protect your domain reputation.

FAQ

Common questions

Email service providers like Google, Yahoo, and Microsoft require senders to authenticate their messages before accepting them into recipient inboxes. SPF specifies which mail servers are authorized to send on behalf of your domain, DKIM attaches a cryptographic signature to verify message integrity, and DMARC instructs receivers on how to handle unauthenticated messages. Failing to publish these records can lead to legitimate emails being marked as spam or rejected outright. Regularly auditing these DNS entries ensures your business communications reach customer inboxes consistently.
The tool checks DKIM by directly querying public DNS TXT records for your designated selector prefix, such as ‘google’, ‘default’, or ‘k1’. It evaluates whether the corresponding public cryptographic key is published properly and formatted according to RFC standards. If a domain uses an unusual or custom selector, typing that selector into the advanced field allows the checker to locate and validate the specific key. This method confirms that mail servers can verify your digital signature without requiring a test email dispatch.
A DMARC policy warning indicates that your domain authentication rules are either misconfigured or set to a non-enforcing mode like ‘p=none’. While a monitoring policy helps gather reports during initial setup, it does not instruct receiving mail servers to block fraudulent messages sent by unauthorized actors. Upgrading your policy to ‘p=quarantine’ or ‘p=reject’ prevents domain impersonation and phishing campaigns using your brand identity. The tool highlights these policy gaps so domain administrators can strengthen their email security posture safely.
All authentication checks run directly within the active web browser session through secure public DNS queries. The domain names, selectors, and mail record data entered into the tool are never saved to external databases or recorded in user tracking logs. Once the browser tab is closed or refreshed, all query results and temporary session values are cleared immediately. This client-side approach ensures your domain security assessments remain confidential.

Keep going

Related tools

DNS Records Checker

Query and inspect all active DNS records for any domain.

Open tool →

DNS Propagation Checker

Verify global DNS cache updates across multiple regional server hubs.

Open tool →

SSL Certificate Checker

Verify SSL/TLS certificate validity, issuer details, and expiration dates.

Open tool →

Blacklist Checker

Scan global DNSBL databases to verify if your mail server or domain is listed.

Open tool →

About the SPF/DKIM/DMARC Email Checker

The SPF/DKIM/DMARC Email Checker is a dedicated security diagnostic utility built for system administrators, webmasters, and email marketers. It analyzes domain DNS records to verify that email authentication mechanisms are correctly configured according to modern deliverability standards. By highlighting syntax errors, missing records, and relaxed policies, the tool helps organizations protect their domain reputation and keep critical emails out of spam folders.

Benefits

  • Prevent email spoofing — identify missing or permissive DMARC policies to stop unauthorized senders from impersonating your domain.
  • Improve inbox placement — correct syntax errors in SPF and DKIM records to ensure outgoing messages pass mail provider spam filters.
  • Audit multiple protocols together — evaluate SPF mechanisms, DKIM public keys, and MX routing in a single consolidated report.
  • Diagnose configuration issues before sending — detect lookup limit exceedances, duplicate records, and invalid tags before launching email campaigns.

Privacy

All domain queries and email record evaluations run directly in your web browser, and no domain names or authentication data are stored on external servers.