Free email infrastructure tool
Check your outreach domain's public authentication records
Inspect SPF and DMARC DNS records before sending to NPI providers. Understand what a public check can verify, and where your sending provider still needs to confirm the details.
Check public authentication records
Enter the domain in your From address. We query only its public DNS TXT records—never inbox credentials or mailboxes.
This check can confirm
- • Whether public SPF and DMARC TXT records are present.
- • A published DMARC policy, when readable.
- • Why DKIM needs your sending provider or a known selector to verify.
Before you start provider outreach
Pair a healthy sending setup with a clear, recipient-respecting campaign plan.
Gmail's sender guidance is updated periodically. Review the current Gmail sender guidelines and your provider's setup instructions before sending.
Public records only
The tool checks public DNS TXT records. It never asks for mailbox, provider, or account credentials.
No inbox promises
Authentication record presence does not prove message-level passing, alignment, consent, or inbox placement.
Keep guidance current
Sending requirements and provider policies change. Verify them with your email provider before launch.
FAQ
Before you send
What does this email authentication checker look up?
It reads public DNS TXT records at the domain you enter and its _dmarc subdomain. It identifies published SPF and DMARC records and shows a readable DMARC policy when one is present.
Can this tool verify DKIM?
Not from a domain alone. DKIM records are published at provider-specific selectors, so verify the selector and passing DKIM result in your sending provider or a message's authentication headers.
Does a found record mean my email will reach the inbox?
No. A public record is only one part of email delivery. This tool does not test message-level authentication, alignment, reputation, recipient consent, spam complaints, or inbox placement.