Free tool

SPF / DKIM / DMARC checker

Inspect email authentication DNS records for your sending domain.

Free · No signup · Uses Piisend public API with Turnstile

SPF, DKIM, and DMARC are the foundation of email authentication. They help receivers trust that your messages are legitimate and improve inbox placement.

Enter your domain and optional DKIM selector (e.g. piisend) to see what is published in DNS. Match results against your email provider's setup guide.

For developers

Call the Intelligence API from your backend with a Piisend API key. No Turnstile token needed — Turnstile is only for this browser checker. See integration guides.

curl -X POST https://api.piisend.com/api/v1/intelligence/dns-auth \
  -H "Authorization: Bearer pii_live_..." \
  -H "Content-Type: application/json" \
  -d '{"domain":"example.com","dkim_selector":"piisend"}'

FAQ

Why is DKIM optional?

DKIM records live at {selector}._domainkey.yourdomain.com. Different providers use different selectors — enter yours to check the right TXT record.

I see SPF but not DMARC — is that OK?

SPF alone is common but incomplete. DMARC tells receivers what to do when authentication fails. Add a DMARC record at _dmarc.yourdomain.com for better protection.

Same engine at signup

Piisend blocks abuse before send

Disposable and phishing domains are rejected on signup and sending-domain setup. Get an API key and send transactional mail with confidence.