Paste the SPF, DKIM, and DMARC records for your domain to validate the full chain.
About this tool
This checker validates the three email authentication records together as a chain: SPF syntax and mechanisms, DKIM key presence and structure, and DMARC policy strength and reporting - flagging the exact gaps attackers exploit, with plain-English fix hints.
Why use it?
Spoofed mail passes whenever any one of the three records is missing, weak, or misconfigured.
SPF lookup limits and +all traps are invisible in raw DNS output but invalid per spec.
p=none DMARC gives monitoring only - the checker tells you when it is time to enforce.
Fix hints are concrete and plain-English instead of spec references.
It runs entirely in your browser - records never leave your device.
Key features
SPF validation: version, all mechanism, +all trap, ptr, and lookup limit
DKIM validation: v= tag, p= public key presence, empty-key detection