Skip to content
Free tool

Email authentication checker.

Look up a domain's SPF, DKIM, and DMARC records in one pass. See what passes, what to fix, and why your mail lands where it does.

Leave blank to probe the selectors most providers use.

How it works

Three records prove your mail is yours.

01

SPF

SPF lists the servers allowed to send mail for your domain. A receiver checks the sending server against that list and flags mail that comes from anywhere else.

02

DKIM

DKIM signs each message with a private key. The receiver fetches the matching public key from your DNS and confirms the message was not altered in transit.

03

DMARC

DMARC ties SPF and DKIM together. It tells receivers what to do when a message fails both, and sends you reports on who is sending mail as your domain.

FAQ

Common questions

What is an email authentication checker?
It looks up the DNS records that prove a message came from your domain: SPF, DKIM, and DMARC. Enter a domain and you get each record, whether it is configured, and what to change if it is not.
What are SPF, DKIM, and DMARC?
SPF lists the servers allowed to send mail for your domain. DKIM signs each message so receivers can confirm it was not altered. DMARC tells receivers what to do when a message fails both checks, and reports back on who sends mail as you.
Why does my domain need all three?
SPF and DKIM each cover one angle of forgery, and a message can pass one while failing the other. DMARC ties them together and sets the enforcement policy. Mailbox providers weigh all three when they decide inbox or spam.
Which DKIM selector should I enter?
The selector is set by whoever sends your mail. Open a message you sent, find the `DKIM-Signature` header, and read the `s=` value. Leave the field blank and this tool probes the selectors that common providers use.
Does a passing check guarantee my mail reaches the inbox?
No. Authentication is the entry ticket, not the whole game. Sender reputation, list hygiene, content, and engagement decide placement once your records pass. Failing records, though, hold mail back before any of that matters.
How often should I recheck these records?
Recheck whenever you add a sending service, rotate a DKIM key, or move DNS providers. A quarterly pass catches records that a vendor change quietly broke.

Send from a domain that passes.

Samva walks you through SPF, DKIM, and DMARC on your own domain, then feeds bounces and complaints into suppression so your reputation holds as volume grows.