EMAIL DNS

Check SPF, DKIM, DMARC and mail configuration

Inspect the public DNS records commonly used for email authentication, routing, automatic setup, transport security and brand identity.

Email diagnostic

DKIM selectors cannot be discovered reliably by DNS enumeration. Replace or extend this list with selectors provided by your mail service when known.
MX, SPF, DKIM, DMARC, Autodiscover, Autoconfig, MTA-STS, TLS-RPT and BIMI results will appear here.
Advertisement

SPF, DKIM and DMARC

SPF lists permitted senders, DKIM adds a cryptographic signature, and DMARC checks alignment with the visible From domain and publishes a handling policy. Together they reduce spoofing when configured correctly.

Transport and setup records

MTA-STS can enforce TLS expectations for inbound mail, while TLS-RPT collects reports about TLS delivery failures. Autodiscover and Autoconfig help mail clients find account settings. BIMI is an optional brand-logo mechanism and is not itself an authentication method.

Want interpretation?

Use the email deliverability checker for provider detection, priorities, explanations and configuration examples tailored to the domain you enter.