SPF, DKIM & DMARC Checker
Check SPF, DKIM & DMARC for your domain. Analyze email authentication DNS records and prevent domain spoofing.
Enter Domain Name to Check
Checks public DNS records for SPF, DKIM, and DMARC configuration (e.g. github.com or google.com)
Who is allowed to send?
Sender Policy Framework lists the IP addresses and mail servers authorized to send emails on behalf of your domain.
Was message cryptographically signed?
DomainKeys Identified Mail adds a digital signature to outgoing emails to prove the message wasn't tampered with in transit.
What to do on auth failure?
Instructs receiving servers whether to accept, quarantine (Spam), or reject emails that fail SPF or DKIM checks.
Frequently Asked Questions
What is SPF?
Sender Policy Framework (SPF) is a DNS record that lists the IP addresses and mail servers authorized to send emails on behalf of your domain name.
What is DKIM?
DomainKeys Identified Mail (DKIM) adds a cryptographic digital signature to outgoing emails. Receiving servers verify this signature against your domain's public key to confirm the email wasn't forged.
What is DMARC?
DMARC (Domain-based Message Authentication, Reporting, and Conformance) uses SPF and DKIM to instruct receiver servers whether to accept, quarantine (mark as spam), or reject unauthenticated emails.
How do I check my SPF record?
Enter your domain (e.g., example.com) in ToolJi's Email Security Checker and click "Check Email Security" to inspect your TXT record.
Why is my DKIM not found?
DKIM is selector-based (e.g. google._domainkey.yourdomain.com). Enter your provider's exact selector (e.g. google, k1, selector1) to perform the DKIM lookup.
What does DMARC p=none mean?
p=none is a Monitoring policy. Receiving mail servers will deliver unauthenticated messages normally while sending aggregate XML reports to your rua= email address.
What does DMARC p=quarantine mean?
p=quarantine instructs receiver mail servers to mark failing messages as Spam / Junk mail.
What does DMARC p=reject mean?
p=reject instructs receiver mail servers to completely reject and block unauthenticated emails from reaching recipients.
Why does DNS verification take time?
DNS changes take time to propagate across global DNS caches depending on your registrar's TTL (Time To Live) settings.