Free email-authentication toolkit

Email authentication you can actually understand.

Audit SPF, DKIM, DMARC, MX, and BIMI in one pass. Get a clear grade, see what is broken, and know what to fix next.

  • No signup
  • No ads
  • No third-party trackers
Example audit Live DNS
Authentication health yourdomain.com
AStrong
Security posture92 / 100

SPFAuthorized senders verified

Pass

DKIMSigning key discovered

Pass

DMARCEnforcement is active

Pass
!

BIMILogo certificate recommended

Review
One recommended improvement is ready with a plain-English fix.
Live DNS answersNot a cached guess
Privacy by designYour searches stay yours
Actionable findingsClear next steps, not RFC-speak
One focused toolkit

Every record. One clear answer.

Start with the complete audit, or go deep on the exact protocol you are troubleshooting.

Complete scan Domain Audit See your complete authentication posture, letter grade, and prioritized fixes. Deliverability SPF Checker Parse your record, trace every include, and catch the 10-lookup limit. Record builder SPF Generator Choose your senders and build a clean, conservative SPF record. Anti-spoofing DMARC Checker Inspect policy, alignment, reporting, and enforcement at a glance. Record builder DMARC Generator Create a staged DMARC policy with reporting that is safe to roll out. Message signing DKIM Checker Look up a selector and inspect the public key behind your signatures. Discovery DKIM Selector Finder Probe 50+ known provider selectors automatically—no guessing required. Mail routing MX Lookup Map mail exchangers and resolve their IPv4 and IPv6 addresses in parallel. Brand trust BIMI Checker Verify your logo, DMARC enforcement, and certificate configuration.
From mystery to a plan

Find the weak link before senders—or attackers—do.

Email authentication spans several records and providers. EmailWax follows the chain for you and turns the result into a practical plan.

Run a complete domain audit
  1. 01
    Enter a domain

    No account, configuration, or access to the domain is required.

  2. 02
    We trace the records

    Checks run across SPF, DKIM selectors, DMARC, MX, and BIMI.

  3. 03
    Fix what matters

    Review prioritized findings and share the result as Markdown or print.

Learn the standards

Plain English beats copy and paste.

Understand what each record does, where it fails, and how to roll out stronger protection without breaking legitimate mail.

SPFWho can send for you?

Map authorized senders and understand the lookup limit.

Read the guide DKIMIs the message authentic?

Learn how cryptographic signatures survive the journey.

Read the guide DMARCWhat happens on failure?

Align identities, collect reports, and stop spoofing safely.

Read the guide
Browse all practical guides

Ready to see what your domain is telling the world?

Run the full check now. It is free, private, and takes no setup.

Audit your domain