Free Email Security Tools

Checkers validate your live DNS configuration. Generators build records you can paste directly into DNS. All free, no account required.

Checkers

Validate your Sender Policy Framework record. Checks mechanisms, DNS lookup counts, and the all mechanism enforcement level.

Probe 22+ common DKIM selectors to find and validate your signing keys. Automatically detects your mail provider.

Analyse your DMARC policy, enforcement percentage, alignment settings, and aggregate/forensic reporting configuration.

Check your MTA-STS DNS record and policy file, validate MX host entries, and verify TLS-RPT reporting is configured.

Resolve your domain to IPs, check all mail server IPs against 12 DNS-based blacklists including Spamhaus, Barracuda, and SpamCop.

Run all 5 checks simultaneously and receive a single 0–100 score with a letter grade (A–F) for your domain.

Paste raw email headers to trace the full delivery path, detect spoofing indicators, and verify SPF, DKIM, DMARC, and ARC authentication results.

Select your email providers, add custom includes and IP ranges, choose your enforcement level, and get a ready-to-publish SPF record.

Configure your DMARC policy level, reporting addresses, alignment settings, and percentage — record builds in real time.

Paste the public key from your email provider and get the correctly formatted DKIM TXT record name and value to publish in DNS.

Generate both the MTA-STS policy file to host on your domain and the DNS TXT record needed to activate it.