✉️ Email Authentication & Anti-Spoofing Audit

SPF, DKIM & DMARC Validator

Validate email sender authentication standards required by Gmail, Yahoo, and Microsoft to protect your domain reputation.

Popular Domains: • •

What Are SPF, DKIM, and DMARC?

SPF (Sender Policy Framework), DKIM (DomainKeys Identified Mail), and DMARC are email authentication standards that verify the sender's identity, prevent email spoofing and phishing, and ensure messages from your domain are delivered directly to recipients' inboxes.

1. SPF (IP Whitelisting)

Defines which server IP addresses and relay services are authorized to send outgoing email on behalf of your domain.

2. DKIM (Cryptographic Signing)

Attaches a digital cryptographic signature to email headers that recipient servers verify using public keys published in DNS.

3. DMARC (Policy Enforcement)

Instructs receiving mail servers how to treat messages that fail SPF/DKIM verification (none, quarantine, or reject).

Frequently Asked Questions

To combat domain impersonation and phishing spam, Google and Yahoo enforce strict email authentication policies requiring all bulk senders to have valid SPF, DKIM, and DMARC alignment.

A DKIM selector is an identifier prefix specified in an email header that points to the exact DNS TXT record containing the public cryptographic key for that specific sending service (e.g. google._domainkey.example.com).

Organizations usually start with p=none to monitor aggregate delivery reports (rua), then progress to p=quarantine (send unauthenticated messages to spam), and ultimately p=reject (block unauthenticated messages outright).

A domain must only have ONE SPF record in DNS. Publishing multiple SPF records violates RFC 7208 and causes email authentication to fail across all mail providers.

DNS & Email Security Suite