Email Authentication Checker

Complete DNS & email security audit — check MX, SPF, DMARC, DKIM, TXT, NS, IPv6, detect providers, and get a security score with actionable recommendations

Complete Email Security Analysis

Check your entire email authentication setup in one click.

Analyze your domain's email security

Enter a domain to run a complete audit — MX records, SPF, DMARC, DKIM, TXT records, nameservers, and IPv6 — with a security score, provider detection, and actionable recommendations.

MX Records SPF DMARC TXT Records Nameservers IPv6

What is the Email Authentication Checker?

The Email Authentication Checker is a comprehensive, one-click audit of your domain's entire email and DNS security setup. Instead of running MX Lookup, SPF Checker, DMARC Checker, TXT Lookup, NS Lookup, and AAAA Lookup separately, this tool runs all six checks in sequence, aggregates the results into a single security score (0–100), identifies your mail provider, DNS provider, and security gateway, and generates prioritized, actionable recommendations.

Think of it as the GTmetrix of email authentication — one URL, one domain input, one comprehensive report. Every improvement made to the individual tools automatically benefits this dashboard, since it calls the same APIs under the hood.

Email Authentication Checker dashboard showing security score, provider detection, and recommendations

How to Use

  1. 1
    Enter Your Domain:

    Type any domain and click "Analyze Domain". The tool runs 6 checks progressively.

  2. 2
    Review Your Score:

    A 0–100 score summarizes your email security across four categories: Authentication, DNS, Configuration, and Best Practices.

  3. 3
    Act on Recommendations:

    Prioritized recommendations (High / Medium / Low) tell you exactly what to fix and why — from missing DKIM to SPF lookup overflows.

  4. 4
    Deep-Dive & Export:

    Expand any section for details, click through to the full dedicated tool, or export the report as CSV / JSON.

What Gets Checked

MX Records:Mail servers, priorities, TTL, provider detection (Microsoft 365, Google Workspace, Zoho), and security gateways (Proofpoint, Mimecast).
SPF:Record presence, syntax validation, mechanism breakdown, recursive lookup count against the 10-lookup limit, policy analysis.
DMARC:Policy analysis (reject/quarantine/none), SPF and DKIM alignment, reporting config, subdomain policy.
DKIM:Probes common selectors (google, selector1/2, default, etc.) to detect whether DKIM signing is configured.
Nameservers:NS records, DNS provider detection (Cloudflare, Route 53, etc.), health checks, and consistency verification.
IPv6 & TXT:AAAA record presence, TXT record classification, detected services (Google, Facebook, Stripe, OpenAI, etc.).

Pro Tips

Fix High Priority First

The recommendations are sorted by impact. A missing SPF or DMARC record is a bigger risk than relaxed alignment — tackle the reds before the yellows.

Run After Every Change

After adding a new ESP, changing DNS providers, or tightening DMARC, re-run this tool to verify your score improved and no new warnings appeared.

Share the Report

Export the JSON or CSV and attach it to a support ticket, compliance audit, or client proposal. The score gives stakeholders a single number to track.

Real-World Applications

IT Admin Weekly Check

Run it every Monday on your primary domains. If the score drops, something changed — new ESP, expired DNS, or a misconfigured SPF flatten.

Vendor Due Diligence

Check a vendor's domain before onboarding. A low email auth score means their domain is easily spoofable — a phishing risk to your org.

Client Deliverables

MSPs and consultants: export the report, attach it to an engagement proposal, and show the client exactly what needs fixing — scored and prioritized.

Individual Tools

The Email Authentication Checker is the most comprehensive free email security audit available — it checks everything (MX, SPF, DMARC, DKIM, TXT, NS, IPv6), scores the result, detects your providers, and tells you exactly what to fix in priority order. Run it once to understand your posture, run it again after every change to verify. No sign-up, no API key, no cost.

More Networking Tools

Comments