EDUGUESTPOST · EMAIL AUTHENTICATION

SPF / DKIM / DMARC Audit

Inspect public email-authentication DNS records. Free, read-only and evidence-first; no email is sent.

PUBLIC DNS · NO EMAIL SENT

Domain evidence

DomainDomain only, using ASCII or punycode. Do not enter a URL, IP address or email address. DKIM selector optionalOnly your supplied selector is checked. Find it in your provider's documentation, DNS or a message's DKIM-Signature header.

A DNS observation, not an email test

This checks exact-name DMARC, supplied-selector DKIM and bounded SPF dependency text. It does not evaluate a sender IP, send email, enumerate selectors, verify message signatures or discover inherited DMARC policy.

The domain and selector go to this site and the selected public DNS resolver. The tool does not store reports; site, host and resolver logs may exist. Do not enter private credentials. Human verification and shared daily usage limits apply.

Human verification

The code expires after ten minutes and works once.

How to read this report

Observed means record text was returned and inspected within this tool's limits, not that a sender passes authentication. Review or Invalid identifies parser findings for review. Revoked means an empty DKIM public key was observed. Not found applies only to the exact queried name. Unknown means evidence was incomplete or unavailable.

DMARC is queried at the exact _dmarc name of your domain. No parent/public-suffix policy discovery is performed. DKIM is checked only for the supplied selector. This is not a deliverability score, security certification or guarantee of inbox placement.