EMAIL AUTHENTICATION DIAGNOSTICS

Know what your domain is telling the world.

Check SPF, DMARC, DKIM and mail routing in one place. See the records, understand the issues, and know what to fix.

◇   Public DNS only · No sign-up · No email access

◈   DOMAIN OVERVIEWILLUSTRATIVE EXAMPLE
example.com ↗

A clearer view of your email configuration.

⌁SPFSender authorizationRECORD FOUND
◎DMARCDomain policyREVIEW POLICY
⌘DKIMSigning keySELECTOR NEEDED
↗MXMail routingRECORD FOUND
◈   Evidence first. Decisions in your hands.
BUILT FOR CLARITY◎   Standards-based DNS checks◷   No account required⌁   DNS evidence included
THE SIGNAL, WITHOUT THE NOISE

One domain. A clearer picture.

Understand the public records that help receiving servers handle your email.

✳01 / 04
SPF

Explore sender policy

See published SPF records and inspect their dependencies.

✳02 / 04
DMARC

Understand your policy

Review published policy and the context behind it.

✳03 / 04
DKIM

Check a known selector

Inspect the public key your email provider publishes.

✳04 / 04
MX

See where mail goes

Review mail routing, including intentional Null MX.

HOW IT WORKS

From DNS records
to next steps.

Built for domain owners, administrators and anyone who wants to understand their email setup.

Explore the guide ↗
01

Enter a domain

Start with the domain you want to understand.

02

We read public DNS

MailTrust checks published records, without accessing your mail.

03

Review the evidence

See what was found, what needs attention and what remains unknown.

FREQUENTLY ASKED

Good questions, clear answers.

Does a published record prove my mail is secure?

No. DNS shows published configuration, not the authentication or delivery outcome of individual messages.

Where do I find a DKIM selector?

Look in your email provider’s DKIM setup or the s= value in a legitimate message’s DKIM-Signature header. You do not need to share the message.

Is a DMARC monitoring policy invalid?

No. A p=none policy is a valid way to request monitoring and collect information before considering enforcement.

SPF checker ↗   DMARC checker ↗   DKIM checker ↗

ⓘ

A clear boundary. MailTrust checks published DNS configuration. It does not verify that actual mail is authenticated or delivered.