Email Authentication Checker
Enter a domain to validate its SPF, DKIM, DMARC, and BIMI records in a single pass. We run live DNS lookups, flag the issues that send your mail to spam or let attackers spoof you, and tell you exactly how to fix each one.
Try: · ·
Why email authentication matters
Mailbox providers like Gmail and Microsoft 365 decide whether your mail reaches the inbox partly by how well your domain proves who it is. SPF, DKIM, and DMARC are the three records that make that proof; BIMI adds your verified logo on top.
A single missing or misconfigured record can quietly tank deliverability or leave your brand open to spoofing. This checker surfaces all four at once so you can see the whole picture instead of guessing.
How to read your results
Each record gets a status: a green “Pass” means it is configured correctly, an amber “Warning” means it works but can be hardened, a red “Fail” means it is broken or unsafe, and “Not found” means the record is missing.
Expand “How to fix” on any finding for plain-language guidance, and copy the recommended DNS record straight into your DNS provider.
Frequently asked questions
- Do I need all four records?
- SPF, DKIM, and DMARC are essential for good deliverability and anti-spoofing. BIMI is optional — it displays your logo in supporting inboxes once DMARC is enforced.
- Is this tool free?
- Yes. There is no signup and no limit beyond basic rate limiting to keep the service healthy.
- Why does DKIM show “Not found”?
- DKIM is published under a provider-specific selector that can’t always be guessed. Enter your selector (e.g. “google”, “selector1”) to check it directly.
Want better inbox placement?
JaxSuite helps you fix authentication, warm up your domains, and land in the inbox.
