Email Auth Checker

Check email authentication records (SPF, DKIM, DMARC) for any domain.

SPF, DKIM, and DMARC are email authentication protocols that protect your domain from spoofing and phishing attacks. Our email security checker queries all three record types for any domain, showing the exact SPF mechanisms, DKIM public keys, and DMARC policies.

Result

Enter a domain to check email auth records.
In Action

SPF Checker in action

Your outgoing email keeps landing in spam for some recipients. Run the SPF check: if the record shows "all" as a hard fail (-all) while your newsletter service is not included, recipients are correctly rejecting your mail. Add the missing include and the checker confirms the fix.

Frequently Asked Questions

What are SPF, DKIM, and DMARC?

SPF, DKIM, and DMARC are email authentication protocols.

How do I check SPF records online?

Enter a domain and the tool fetches and decodes its SPF record, showing every included mechanism (ip4, include, a, mx, all) in readable form. It also validates syntax so you can spot misconfigurations immediately.

What does "SPF permerror" or "temperror" mean?

A permerror means the SPF record is malformed and receivers will ignore it; a temperror means a temporary DNS problem prevented evaluation. Both silently break email authentication, which is why syntax validation matters.

Can I have multiple SPF records for one domain?

No — a domain must have exactly one SPF record. Multiple records cause permerror and your email may be rejected. Use the checker to verify you have exactly one, and merge multiple sources into a single record with include: entries.