Free SPF & DMARC checker (with SPF lookup count and DKIM selector lookup)

Type a domain to check its SPF record (including the total DNS lookup count across nested includes), its DMARC policy, and DKIM keys for common or custom selectors. The lookups run in your browser over DNS-over-HTTPS; nothing is sent to EdenWorks (privacy).

What this checker looks at

• SPF: exactly one v=spf1 record; the all qualifier (+all and ?all are flagged); the number of DNS-querying terms (include, a, mx, ptr, exists, redirect) across every nested include, against the RFC 7208 limit of 10; includes that point to a domain without an SPF record; and void lookups.
• DMARC: a record at _dmarc. (falling back to the parent domain for subdomains), the p= and sp= policies, whether aggregate reports (rua=) are requested, and the legacy pct= tag.
• DKIM: whether a key exists at each selector, whether it is revoked (empty p=), and an estimate of the RSA key size.

Limits: it reads public DNS only and does not send any email, so it cannot tell you whether a specific message passes or how it is aligned. Lookup counting follows the SPF rules, but a few edge cases (macros, exists targets) are counted without being expanded. For the full background, read how to check SPF, DKIM and DMARC records.