Auth-record scoring

Paste a domain — get a 0-100 SPF / DKIM / DMARC score with concrete fixes.

Paste a sending domain (e.g. example.com) and we'll resolve the SPF record at the root, the DKIM key at <selector>._domainkey.<domain>, and the DMARC policy at _dmarc.<domain> from the live authoritative nameservers. Each protocol is parsed against the relevant RFC (7208, 6376 and 7489) using the same engine the owner-side auth-audit uses, the verdict is computed by a structural parser (not a model), an LLM analyst narrates a one-sentence plain-language explanation for anything off, and a deterministic 0-100 score rolls up the overall posture so a returning visitor can compare runs.

Check the SPF / DKIM / DMARC posture for a domain
Paste a sending domain and we'll resolve whichever records you select below — the SPF record at the root, the DKIM key at <selector>._domainkey.<domain>, and the DMARC policy at _dmarc.<domain> — from the live authoritative nameservers. Each protocol is parsed against the relevant RFC and reduced to a verdict plus a one-sentence plain-language explanation when something's off, with an aggregated 1-5 fix-steps list you can hand to your DNS or email admin.
Records to check *

Pick which protocols to score. At least one must stay selected.

Optional DKIM selectorDefaults to "default" — override for custom ESPs

DKIM selectors are the subdomain labels that distinguish one key from another (e.g. k1._domainkey.example.com). Leave blank to probe default plus the standard fallback list. Only used when DKIM is checked above.

Continuous authentication-posture monitoring?
One email and we'll let you know when ReputaPilot opens up — header-level authentication scoring, deliverability, blocklist + reputation coverage, with an email the moment a record flips or a new listing appears.

Drop your email above — we'll only ping you about the authentication monitor. No newsletters, no upsells.

Have a specific question? Email us

FAQ

SPF / DKIM / DMARC checker — frequently asked questions

Pair this checker with the guide

Want the bigger picture on sender reputation?

The 0–100 score this checker returns is the authentication floor — the part of sender reputation that is purely under your control. The full reputation guide explains how that same floor composes with Gmail Postmaster Tools domain + IP reputation, Microsoft SNDS per-IP filter colour, complaint rate, and the major DNSBLs to produce the placement a given inbox actually delivers.

Read the sender reputation guide →Browse the deliverability FAQ →

Pair this checker with the pillar

Want the per-provider score behind the authentication floor?

The pass / warn / fail verdict above is the authentication floor of sender reputation — the part that recovers fastest once DNS propagates. The Email Reputation pillar covers the slower recovery lanes: how each provider — Gmail Postmaster Tools, Microsoft SNDS, SenderScore, and Cisco Talos — composes that floor into a per-provider band on the same domain, and which one is still throttling weeks after the records went green.

Read the Email Reputation pillar →

Pair this checker with the guide

Looking for the full SPF, DKIM, DMARC, and BIMI setup walkthrough?

The email authentication pillar walkthrough explains what each of the four protocols does in the receiver, the order to publish each record so they actually compose as a stack, why Google and Yahoo made all three mandatory in 2024, and where BIMI fits once DMARC is enforced. Read it when you are wiring up authentication for the first time, then come back here to confirm the records you just published actually validate.

Read the email authentication guide →