Bulk SPF, DKIM & DMARC checker

What this checker does

This tool runs the same three authentication checks as the single domain Email Authentication Checker, but for a whole list at once. Paste up to 20 domains, one per line, and it reads live records from public DNS for each one: the SPF record at the root, DKIM keys at the common selectors, the DMARC policy at _dmarc, and whether MX records exist. Results reflect public DNS at check time, so a record you published a minute ago may not show up here yet.

How to read the table

Each row is one domain and each column is plain about what it found. Pass means the record is there and looks right. Warn means something is present but weak, for example an SPF record that ends in ~all instead of -all, a DMARC policy of p=none, or DKIM that was not found at the common selectors. A custom DKIM selector can still exist, so check a single domain in the DKIM Checker if you know the selector your provider uses. Fail means the record is missing.

Fixing common failures

Start with Fail rows, because missing SPF or missing DMARC is what mailbox providers punish first. Publish SPF for the services that send for the domain, then publish DMARC at _dmarc and move it from p=none to p=quarantine or p=reject once your reports look clean. Work through one domain at a time in the DMARC Checker and MX Record Checker when you need the full record text for a fix.