Skip to content
Nexta Web Solution

Free tool by Nexta Web Solution. No sign-up.

DMARC and DKIM Checker

See whether your domain is protected from spoofing: DMARC policy, reports, coverage and DKIM keys, with a correct record to copy if anything is missing.

Try:

Planning a project?

Talk to a project lead for a free 30-minute consultation and a written estimate.

Book a call WhatsApp

Why DMARC matters now

Since 2024, Gmail and Yahoo require DMARC from anyone sending in bulk, and every major mailbox provider uses it to decide what to trust. DMARC tells receivers what to do with mail that claims to be from your domain but fails SPF and DKIM: nothing (p=none), spam folder (p=quarantine) or reject (p=reject). It also sends you reports showing every server that sends as your domain.

A safe way to roll out DMARC

  1. Publish v=DMARC1; p=none; rua=mailto:dmarc@yourdomain and read the reports for two to four weeks.
  2. Fix SPF and DKIM for every legitimate sender you find.
  3. Move to p=quarantine, then to p=reject.

DKIM

DKIM signs each message with a private key; the public key is published in DNS at selector._domainkey.yourdomain. We try 20 common selectors used by Google, Microsoft, Zoho, cPanel and popular email platforms. Keys should be 2048-bit. If yours is not found, enter the selector from the s= value of a DKIM-Signature header under Advanced.

Frequently asked questions

It meets the minimum for Gmail and Yahoo bulk sending, but it does not stop spoofing. Plan to move to quarantine or reject once reports look clean.

To the address in rua=. They are XML files, so most people send them to a free or paid DMARC report service that turns them into charts.

Usually the email platform is not signing with your domain, the message was changed in transit (some forwarders and footers do this), or the published key does not match the private key.

DMARC passes if either SPF or DKIM passes and aligns with the From domain. Having both makes delivery more reliable, especially through forwarding.

More free tools

Domain Health Check

Blacklists, SPF, DKIM, DMARC, MX, DNS and SSL in one report with a score and fixes.

Try free

Email Blacklist Check

Check your mail server IP and domain against 50+ blacklists in seconds.

Try free

MX Lookup and SMTP Test

See your mail servers and test SMTP, STARTTLS and reverse DNS live.

Try free