SPF, DKIM and DMARC check
Check the email records a domain publishes today and see what to fix first.
Open the SPF, DKIM and DMARC check →Free email authentication tools
Check the records your domain publishes today, build the SPF and DMARC records it is missing, then read the first report that arrives. No signup, and nothing you enter is stored.
The tools
Check first. Then build what is missing.
SPF record generator
Build an SPF record for the services that send your email, with an estimate against the 10 DNS lookup limit.
Open the SPF record generator →DMARC record generator
Build a DMARC record step by step, from monitoring with a reporting address to reject.
Open the DMARC record generator →DMARC report analyzer
Read a DMARC aggregate report in your browser: every source, its volume, SPF and DKIM alignment, and what to do next.
Open the DMARC report analyzer →BIMI checker
See whether Gmail, Yahoo, Apple Mail and Outlook can show your logo, and which BIMI requirement is missing.
Open the BIMI checker →MCP server
Use the domain check and the SPF and DMARC generators from Claude, Cursor or another AI assistant.
Open the MCP server →Where to start
From an unprotected domain to an enforced policy.
- 01
Check your domain
The free check shows which records are missing or weak.
- 02
Publish SPF
List every service that sends your email with the SPF record generator.
- 03
Publish DMARC
Start at p=none with a reporting address using the DMARC record generator.
- 04
Enforce with evidence
Read the reports with the DMARC report analyzer. When they show your real senders pass, move to quarantine, then reject.
After the tools
Records change. Reports keep coming.
DemiSignal paid plans check your records on a schedule, alert you when something changes, and read the DMARC reports receivers send, so you know who is sending email as your domain and when it is safe to enforce.
See plans and pricing →