Free tool
Check whether a domain publishes valid SPF, DKIM, and DMARC records, with plain-English remediation guidance for anything missing or misconfigured. No signup, no email required, and every result gets a shareable link.
Run a check
SPF (who is allowed to send for your domain), DKIM (a per-message signature that proves mail wasn't altered in transit), and DMARC (the policy telling receivers what to do when SPF or DKIM fails). All three are read live from public DNS -- nothing is stored against an account.
DKIM selectors aren't published anywhere discoverable -- there's no DNS record that says "my selector is X". This tool probes a handful of common defaults (google, selector1, k1, ...). If your provider uses a different one, re-run the check with ?selector=yourselector appended to the result URL.
Yes, and no. No signup, no rate-limited-behind-a-login-wall trick -- this exists so anyone can sanity-check a domain's mail authentication before it becomes a deliverability problem.
Every check gets its own URL at /tools/dns-checker/<domain>, safe to share, link to, or bookmark. Results reflect DNS at the time the page was generated and refresh periodically.
Fixing what you find
If a domain you send from is missing SPF, DKIM, or DMARC, PulsePigeon generates and verifies all three during domain setup, then alerts you if a record drifts. See the developer docs or create a free account to get started.