Send-mail authentication check

Is your domain pretending to be someone else?

Enter any sending domain — we pull the SPF, DKIM and DMARC records straight from authoritative DNS, flag every misconfiguration against RFC 7208, RFC 6376 and RFC 7489, and give you copy-paste record fixes.

Check any domain
Paste the domain you send mail from — we'll resolve the SPF record at its root, the DKIM record at the selector you provide, and the DMARC record at _dmarc, then grade each against RFC 7208, RFC 6376 and RFC 7489.
Advanced — DKIM selector tuning

Defaults to default with google, k1, s1, s2, selector1, selector2 as fallbacks — covers Google Workspace, Office 365, SendGrid, Mailgun and most ESPs out of the box.

Audit report
Submit a domain above to run an authentication check.

We'll resolve the SPF record at the domain root, the DKIM record at <selector>._domainkey, and the DMARC record at _dmarc — then grade each against the relevant RFC.

Remediation
No issues to remediate yet.

Every flagged misconfiguration ships with a one-click copy-paste DNS record pair (host + value) so you can publish the fix straight from your provider.

Want continuous monitoring and alerts for this domain?

ReputaPilot audits your domain daily, alerts you when an SPF / DKIM / DMARC record drifts or a blocklist listing appears, and keeps a 90-day history.

Monitor this domain →

Pair this checker with the guide

Want the bigger picture on sender reputation?

Validation that one record passes the relevant RFC is not the same as a sender reputation that lands in the inbox. The full reputation guide explains how the SPF/DKIM/DMARC verdicts you already pass turn into Gmail Postmaster domain reputation, Microsoft SNDS per-IP filter colour, complaint rate, and DMARC RUA alignment — and which of those four signals is your dominant placement driver.

Read the sender reputation guide →