Skip to main content
New AI-powered DMARC analysis + open REST API See how →
Free Tools

Free email authentication
tools

Check your DMARC, SPF, DKIM, BIMI, and MTA-STS records instantly — no signup, no data collection, no usage limits. 11 tools, zero friction.

11 Free Tools

Every tool your domain needs

Each tool queries live DNS and returns results in seconds. No account required — enter a domain and go.

DMARC Record Checker

Validate your DMARC policy, check alignment settings, verify reporting configuration, and detect duplicate or misplaced records.

Use tool

DMARC Record Generator

Create a valid DMARC record in 60 seconds. Choose your policy, configure reporting addresses, set alignment modes — copy directly into DNS.

Use tool

SPF Record Checker

Analyze your SPF record, count DNS lookups against the RFC 7208 limit of 10, and visualize the full include tree.

Use tool

SPF Record Generator

Build a valid SPF record by selecting your email providers and adding custom IPs. Shows live lookup counting as you build.

Use tool

SPF Record Lookup

Look up any domain's SPF record from live DNS. See the raw TXT record, expand nested includes, and count total lookups.

Use tool

SPF Validator

Validate any SPF record for syntax errors, DNS lookup violations, void lookups, and full RFC 7208 compliance.

Use tool

DKIM Record Lookup

Auto-discover DKIM selectors across 185+ common selectors. Identify Google Workspace, Microsoft 365, SendGrid, and 100+ providers.

Use tool

BIMI Checker

Verify your BIMI record, fetch the brand logo SVG, and check VMC (Verified Mark Certificate) status for any domain.

Use tool

MTA-STS Checker

Validate the MTA-STS DNS record and HTTPS-hosted policy file. Check enforcement mode, authorized MX hosts, and cache duration.

Use tool

Domain Auth Checker

Check all 5 email authentication protocols at once — SPF, DKIM, DMARC, BIMI, and MTA-STS. Get an overall authentication posture score.

Use tool
Protocol Reference

What these tools check

Six email authentication protocols, each published as a DNS record. Together they determine whether your email is trusted, displayed with your brand logo, and encrypted in transit.

SPF
TXT @ domain

Declares which servers are authorized to send email for your domain. Receivers check the sending IP against your SPF list.

DMARC
TXT @ _dmarc.domain

Tells receivers what to do when SPF or DKIM fails — monitor, quarantine, or reject. Enables aggregate and forensic reporting.

DKIM
TXT @ selector._domainkey.domain

Cryptographic signature attached to each email. The receiving server verifies the signature against a public key in DNS.

BIMI
TXT @ default._bimi.domain

Displays your brand logo next to authenticated emails in supporting clients like Gmail, Apple Mail, and Yahoo Mail.

MTA-STS
TXT @ _mta-sts.domain + policy file

Forces TLS encryption on inbound mail delivery, preventing downgrade attacks and man-in-the-middle interception.

TLS-RPT
TXT @ _smtp._tls.domain

Instructs receivers to send reports about TLS connection failures when delivering email to your domain.

Trust & Transparency

11 tools, zero signups,
no data collection

We built these tools because checking your email authentication records should not require handing over your email address. Every lookup queries live DNS directly and returns results to your browser — nothing is stored, logged, or tracked.

11
Free tools
0
Signups required
185+
DKIM selectors checked
< 3s
Average lookup time
dmarcreport.com/tools/dmarc-checker
DMARC Record
v=DMARC1; p=reject; rua=mailto:...
found
Policy
reject
enforced
SPF Alignment
relaxed (aspf=r)
pass
DKIM Alignment
relaxed (adkim=r)
pass
Aggregate Reports
rua= configured
pass
Forensic Reports
ruf= not configured
warning
Free Tool vs Platform
Domains checked
1 at a time
Unlimited, continuous
Report analysis
Not included
Aggregate + forensic
Sender classification
Not included
200+ vendors identified
Historical trends
Snapshot only
1+ year of trend data
Alerts
Not included
Email, webhook, Slack
Multi-domain management
Not included
Centralized dashboard
Go Further

When you need
more than a snapshot

Free tools check one domain at a time and give you a point-in-time result. DMARC Report monitors all your domains continuously — processing aggregate and forensic reports, classifying senders, tracking trends, and alerting you when something changes.

Moving from p=none to p=reject typically takes 9 to 18 months, with 90+ days per policy phase. You need continuous monitoring — not periodic spot checks — to get there safely.

Ready to move beyond spot checks?

Start your free trial — no credit card required. Setup takes 5 minutes.

Start Free Trial

What Users Say About Our Tools

G2 Leader — DMARC

Rated 4.8/5 on G2 · 469 verified reviews

G2 Momentum Leader — DMARC
DG

Dave G.

Owner

5/5

"DMARC Report has been invaluable in fixing email deliverability issues for our clients"

DMARC Report dashboard allows us to see easily what is compliant and what isn't compliant so we can quickly fix issues.

9/27/2022 Verified on G2
AL

Antoine L.

5/5

"Incredible Service for an affordable price"

The software is easy to use and has also an entry friendly free plan up to 1,000 mails per month.

9/12/2023 Verified on G2
ZK

Zunaid K.

Director

5/5

"Essential tool for email delivery"

This tool helps us to implement DMARC reporting for our domains in an easy to use manner.

8/8/2024 Verified on G2