Free tools

Each tool checks one part of your email setup, for when you (or your IT person) want to look at one thing. No account, no email address, and the full result every time. Not sure where to start? Check everything at once.

Checkers

• Full domain health checkCheck SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT and BIMI for any domain in one pass, with the exact records and the fix for anything that is wrong.
• SPF checkerLook up a domain's SPF record, validate its syntax, and count the DNS lookups it costs, including every nested include, against the limit of ten.
• DMARC checkerLook up and validate a domain's DMARC record, read back what its policy actually does, and see what is needed to move to enforcement.
• DKIM checkerCheck a DKIM selector for a domain, validate the record, and read the key strength. Leave the selector blank to probe the selectors common providers use.
• MX lookupList a domain's mail exchangers and priorities, confirm each resolves to a reachable address, and catch the misconfigurations that break inbound mail.
• MTA-STS checkerCheck a domain's MTA-STS record, fetch its policy file, and confirm the policy covers every mail exchanger the domain actually publishes.
• BIMI checkerCheck a domain's BIMI record and confirm the DMARC policy meets the enforcement requirement that BIMI depends on.
• Sender requirements checkerCheck whether your domain meets the email authentication rules Google, Yahoo and Microsoft now enforce (SPF, DKIM and DMARC), and see exactly what to fix if it doesn't.

Generators

• SPF record generatorBuild a valid SPF record from the services you actually send with, with the DNS lookup cost calculated as you go so you do not exceed the limit.
• DMARC record generatorBuild a valid DMARC record with the policy, reporting address and alignment you want, and understand what each choice does before you publish it.