Check your domain's email authentication in seconds. Validate DNS records, test deliverability, and find misconfigurations before they cause problems.
Enter a domain, get instant results
Verify record syntax, policy strength, alignment settings, and reporting configuration.
Validate SPF records, count DNS lookups against the 10-lookup limit, and detect providers.
Verify DKIM keys across common selectors, check key strength, and detect weak keys.
Validate MTA-STS DNS records, HTTPS policy files, mode configuration, and MX alignment.
Check BIMI records, logo availability and format, and VMC certificate authority.
Validate TLS-RPT DNS records, reporting destinations, and STARTTLS support.
Beyond DNS lookups
Send a real test email and verify that SPF, DKIM, and DMARC alignment are properly configured on your sending infrastructure.
Step-by-step guide to writing your SPF record, with copyable include values for common email providers and the 10-lookup limit explained.
Generate DANE TLSA records from the certificate your mail servers actually serve. No certificate pasting required.
These tools give you a one-time check. MailShield rechecks your domains every 2 hours, alerts you when something changes, and processes your DMARC reports. Free for 1 domain.