SPF and DMARC Checker

Check a public domain's email authentication records, with plain warnings about what DNS alone cannot prove.

Enter a domain and click Check records.

Note: This reads DNS through fixed public Cloudflare and Google resolvers. Results may be cached until the TTL expires. A DNS record alone cannot prove your sent mail passes or that it reaches an inbox. To test DKIM and alignment, inspect a real message's authentication results. DKIM selector names are not enumerable, so this tool does not guess them.