Free Email Deliverability Tools — SPF, DKIM & DMARC
Everything you need to make sure your email reaches the inbox instead of the spam folder. Check your domain's MX, SPF, DKIM, DMARC and BIMI records, generate the records you're missing, analyze the headers of a message that went wrong, and turn DMARC aggregate reports into something readable.
The checkers query DNS from our server so they see exactly what a receiving mail server sees. The generators and analyzers run entirely in your browser — notably the DKIM key generator, where the private key never leaves your machine.
🔎 Check6
Email Deliverability Check
One report: MX, SPF, DKIM, DMARC & BIMI with a score and fixes.
MX Lookup
Find a domain's mail servers and their priority order.
SPF Checker
Validate an SPF record and count its DNS lookups against the limit of 10.
DKIM Checker
Look up a domain's DKIM public key by selector — or auto-detect it.
DMARC Checker
Check a DMARC record and get its policy explained in plain English.
BIMI Checker
Check a domain's BIMI record and preview the inbox logo.
📋 Records3
🔬 Inspect2
Also useful for email
These live under Networking, but they come up just as often here.
Check your setup
- Email Deliverability Check — MX, SPF, DKIM, DMARC and BIMI in one scored report.
- MX Lookup — the mail servers that accept your domain's email.
- SPF Checker — syntax plus a count against SPF's 10-DNS-lookup limit.
- DKIM Checker — find your public key by selector, or auto-detect it.
- DMARC Checker — your policy, reporting and alignment, explained.
- BIMI Checker — the record that puts your logo in the inbox.
Create the records
- SPF Record Generator — provider presets and a live lookup counter.
- DMARC Record Generator — policy, reporting and alignment, with rollout guidance.
- DKIM Key Generator — a 2048-bit key pair generated in your browser.
Diagnose problems
- Email Header Analyzer — the delivery path, hop delays and auth verdicts.
- DMARC Report Viewer — aggregate XML reports as a readable table.
Why email authentication matters now
Google and Yahoo now require SPF, DKIM and DMARC from bulk senders, and receivers everywhere weigh authentication heavily when deciding between the inbox and the spam folder. The three work together: SPF says which servers may send for you, DKIM signs each message so tampering is detectable, and DMARC tells receivers what to do when those checks fail — and sends you reports showing who is sending mail as your domain. Without them, anyone can spoof your address and your legitimate mail is more likely to be filtered.
Frequently asked questions
Why is my email going to spam?
The most common cause is missing or broken authentication. Run the Email Deliverability Check — it tests SPF, DKIM and DMARC together and tells you exactly which one needs fixing.
What order should I set these up in?
SPF and DKIM first, since DMARC depends on them. Then publish DMARC at p=none, read the reports until all your legitimate mail passes, and only then move to quarantine and reject.
Are these tools free?
Yes, all of them, with no signup or limits.
Is my data sent anywhere?
The checkers send only the domain name to our server so it can query DNS. The generators and analyzers — including DKIM key generation and header analysis — run entirely in your browser.
Do I really need DMARC?
If you send any volume of email, yes. Google and Yahoo require it for bulk senders, and it's the only mechanism protecting the From address your recipients actually see.