Content is loading…
Share
Check SPF, DKIM, and DMARC records for any domain with plain-English explanations.
Checks SPF, DKIM, and DMARC DNS records via Cloudflare DNS-over-HTTPS.
Check a domain's email authentication DNS records — SPF, DKIM, and DMARC — in one place. Looks up the relevant TXT records via Cloudflare DNS-over-HTTPS, parses each one, and explains it in plain English. Flags common misconfigurations like missing SPF, multiple SPF records, +all (insecure), and DMARC p=none (monitoring only), then scores your overall email security and gives clear recommendations. DKIM common selectors are probed (default, google, selector1, selector2, k1, mail, dkim, s1, s2).
Email DNS Checker provides a centralized way to look up and analyze a domain's email authentication records—specifically SPF, DKIM, and DMARC. By automatically probing common selectors and translating complex TXT records into plain-English explanations, it helps users quickly identify security misconfigurations and overall email health without digging through raw DNS data.
Good to know: This tool automatically probes standard and common DKIM selectors; domains using highly custom selector names may require manual configuration input or specialized mail server diagnostics.
Verify and troubleshoot your SPF, DKIM, and DMARC email authentication records to improve deliverability and security.
Enter the target domain name
Type the domain you wish to audit into the search field to begin the DNS record lookup process.
Run the email authentication scan
Click the check button to trigger the Cloudflare DNS-over-HTTPS lookup for SPF, DKIM, and DMARC TXT records.
Review the plain-English record breakdown
Read the parsed explanations for each record to understand how your current email security configuration is interpreted by receiving servers.
Check for security flags and errors
Identify critical issues such as multiple SPF records, insecure +all mechanisms, or DMARC policies set only to monitoring mode.
Analyze the overall security score
Evaluate the generated security score and follow the specific recommendations provided to fix misconfigurations and harden your domain.
Estimated time: PT1M
Share this tool
Query A, AAAA, MX, TXT, CNAME, and NS DNS records for any domain.
Look up domain registration, expiry, nameservers, and registrar.
Identify device vendor from a MAC address.
Check SSL/TLS certificate details and expiry for any domain.
Look up country, city, ISP, and location for any IP address.
Measure your download speed, upload speed, ping, and jitter in seconds.
See your public IP address plus full location, ISP, ASN, timezone, coordinates, and more.
Calculate subnet details from CIDR notation instantly.
Audit response headers + get a security grade for any URL.
Test if a TCP port is open on any host.
Convert text or Markdown to a Word .docx file with live preview, RTL, and page-setup options.
Convert images to video with the Ken Burns zoom/pan effect. Add music and export as WebM.
Load and compare multiple URLs side by side in resizable iframes.
See your public IP address plus full location, ISP, ASN, timezone, coordinates, and more.
Convert Markdown to a fully customized, RTL-ready PDF.
Play local or online videos with HLS stream support, subtitles, playlist, and bookmarks.
Convert Markdown to a formatted Word .docx — live preview, RTL, tables, page setup, all client-side.
Generate speech from text using local AI models. Download as WAV. Runs entirely in your browser — private and free.
