Check any domain's email authentication records. Get compliance scores, policy analysis, and actionable recommendations to improve deliverability.
No login required. Enter a domain and get instant results.
Everything you need to verify and improve your domain's email security posture.
Full DMARC record parsing with policy evaluation, reporting configuration, and alignment mode detection.
Analyze SPF records for syntax errors, lookup limits, and mechanism coverage with optimization suggestions.
Check DKIM selectors, key strength, and rotation status. Supports RSA and Ed25519 keys.
Get an overall score based on industry best practices for email authentication and security.
Receive specific, prioritized recommendations to improve your email authentication setup.
Generate professional reports for clients, audits, or internal documentation.
From domain entry to actionable insights in seconds.
Type any domain name you want to analyze
We query DNS for DMARC, SPF, and DKIM records
Records are parsed and validated against best practices
Get scores, details, and recommendations instantly
Start free, upgrade when you need more power.
Perfect for occasional checks
For professionals
For teams & MSPs
White-label solution
DMARC (Domain-based Message Authentication, Reporting, and Conformance) is an email authentication protocol that helps protect domains from spoofing and phishing by building on SPF and DKIM.
SPF verifies the sending server, DKIM verifies the message integrity, and DMARC ties them together with policy enforcement. All three work together for maximum protection.
Start with p=none to monitor, then move to p=quarantine, and finally p=reject once you're confident in your setup. We recommend reaching p=reject for full protection.
Common selectors include "google", "selector1", "s1", "default", or your ESP's name. Check your email provider's documentation or use our Pro plan for automatic selector discovery.
90+ is excellent, 70-89 is good, 50-69 needs improvement, and below 50 requires immediate attention. Aim for 90+ with p=reject for best deliverability.
Check after any DNS changes and at least monthly. Our Pro plans offer automated monitoring to alert you of any issues immediately.