Private mail authentication check

Precheck SPF, DKIM, and DMARC before publishing

Paste a TXT record candidate to inspect basic syntax and configuration hints in this browser. No DNS lookup or email sending is performed.

Check a record

Check results

Static report

This is a precheck of pasted content. It does not guarantee DNS propagation, deliverability, Gmail requirements, or protection from spoofing.

What this check covers

SPF `v=spf1`, mechanisms, `include`, `redirect`, `all`, and possible DNS-lookup mechanisms. Include targets are not expanded through DNS.
DKIM `v`, `k`, `p`, and related formats, including a warning for input that looks like a private key. Signatures are not verified.
DMARC `v`, `p`, report URIs, alignment, `pct`, duplicate tags, and unknown tags. Policy quality is not asserted.

Record content, domains, and email addresses are not sent or stored outside this browser. Results are not live DNS or receiver measurements.

References: Google Email sender guidelines / RFC 7208 SPF / RFC 6376 DKIM / RFC 7489 DMARC