Cybersecurity

DMARC Inspector

Check DMARC and SPF configuration for a domain, with an optional DKIM selector check. Uses read only DNS queries over HTTPS.

Estimated time: 1-2 min
Difficulty level: Intermediate
Privacy: Runs locally
All Cybersecurity tools
A quick privacy note
This tool queries public DNS over HTTPS. Do not use internal domains.
Check DKIM selector
Optional. DKIM depends on the selector used by your email provider. This tool will not guess it.
How to think about email authentication
SPF

SPF is a list of who is allowed to send mail for a domain. Receivers can check the sender against that list.

DKIM

DKIM is a signature on the email. It proves the message has not been changed and it came from a sender that owns the key.

DMARC

DMARC ties SPF and DKIM together, then tells receivers what to do when checks fail. It also supports reporting.