Email Authentication

Email Authentication brings together 8 free tools with no sign-up to strengthen and check an email configuration. SPF builder and DMARC builder help compose policies, while Check SPF, DMARC Check, DKIM Check, MTA-STS Check, TLS-RPT Check and BIMI Check validate specific points. These tools matter to administrators, webmasters and providers managing email sending and receiving.

To create a policy, start with SPF builder or DMARC builder. If a record already exists, use the matching checks: Check SPF, DMARC Check, DKIM Check, MTA-STS Check, TLS-RPT Check or BIMI Check. The order depends on your priority: sending policy, signature, secure transport, reporting or logo. These tools help verify before publishing a change.

How to use

  1. To create a sending policy, start with SPF builder, then verify the result with Check SPF before publishing.
  2. Next compose a handling policy with DMARC builder, then validate it through DMARC Check to see the published instructions.
  3. For signature and transport, check DKIM Check, MTA-STS Check and TLS-RPT Check depending on whether you target authentication or channel security.
  4. If a logo should appear, finish with BIMI Check and verify the related declaration without changing the other policies.

Frequently asked questions

What is the difference between a builder and a check?

A builder such as SPF builder or DMARC builder helps compose a policy. A check such as Check SPF or DMARC Check validates what is already published for a domain. The first helps prepare, the second confirms.

Can I check DKIM and BIMI?

Yes, DKIM Check verifies the public key of an email selector. BIMI Check verifies the logo declaration of a domain. These tools are free, require no sign-up and complement SPF and DMARC checks.

In what order should I fix SPF and DMARC?

Start with SPF builder to set a consistent sending policy, then Check SPF. Next, use DMARC builder and DMARC Check. This order avoids publishing a DMARC policy that relies on an unstable SPF.

When should I check MTA-STS and TLS-RPT?

MTA-STS Check validates the TLS policy, while TLS-RPT Check concerns TLS reports. Use them after stabilizing SPF, DMARC and DKIM, because they complete transport security without replacing email sending authentication.

Tools in the same category