This tool generates a DMARC record you can publish to your DNS. Once this record is published, a daily report will be sent to a unique email address that matches your account. The data contained within this report is then processed and displayed on your dashboard. You can also have forensic emails forwarded to another unique email address.
Please publish the following DNS TXT record on the subdomain: _dmarc.YOURDOMAIN.com
DMARC Record Checker
Use this tool to lookup and validate your DMARC record.
Please enter a valid domain name, without http:// prefix
What is DMARC?
DMARC (Domain-based Message Authentication, Reporting and Conformance), is an email authentication standard, policy, and reporting protocol. It builds on the widely deployed SPF & DKIM protocols and is the only way for email senders to tell email receivers that the emails they are sending are truly from them. Using DMARC enables senders to publish a policy on how email servers should react on inauthentic messages.
DMARC Status
SPF Record Generator
Use this tool to generate your SPF record.
Warning: missing "all" tag, which is equal to "?all" (neutral), please use "-all" for maximum security!
Please publish the DNS TXT record above on your domain
SPF Record Checker
Use this tool to lookup and validate your SPF record.
Please enter a valid domain name, without http:// prefix
What is SPF?
Sender Policy Framework (SPF) is a simple email-validation system designed to detect email spoofing by providing a mechanism to allow receiving mail exchangers to check that incoming mail from a domain comes from a host authorized by that domain's administrators
SPF Status
DKIM Record Generator
._domainkey.
Please enter a valid domain name, without http:// prefix
Private key
You must enter this key in your DKIM signer. It must be kept secret, as anyone with access to it can stamp tokens pretending to be you
Generated DKIM Record
Please, publish above DNS TXT record on ._domainkey. subdomain
DKIM Record Checker
Use this tool to lookup and validate your DKIM record.
Please enter a valid domain name, without http:// prefix
What is DKIM?
DKIM (DomainKeys Identified Mail) allows senders to associate a domain name with an email message, thus vouching for its authenticity. This is done by "signing" the email with a digital signature, a field that is added to the message's header. The recipient MTA can verify the DKIM signature, which gives users some security knowing that the email did actually originate from the listed domain, and that it has not been modified since it was sent.
DKIM Status
FCrDNS Record Checker
Use this tool to lookup your FCrDNS record.
Enter a valid IP address
What is FCrDNS?
Forward Confirmed Reverse DNS FCrDNS is a DNS technical configuration that shows a relationship exists between an IP address and a hostname. By having FCrDNS, you prove that your IP address is using a sending domain that you own. This relationship provides a form of authentication that some mailbox providers use in their spam filter methodology.
FCrDNS Status
BIMI Record Lookup
Use this tool to lookup and validate your BIMI record.
Please enter a valid domain name, without http:// prefix
What is BIMI?
BIMI, or Brand Indicators for Message Identification, is a new standard created to make it easier to get your logo displayed next to your message in the inbox. Not only will this help your visibility, but BIMI is designed to prevent fraudulent emails and aid deliverability, too.
BIMI Status
Domain at DMARC enforcement :
Yes
Domain at DMARC enforcement :
No
Valid BIMI record :
Hosted BIMI :
Hosted BIMI :
Not Enabled
The domain’s BIMI logo is not hosted by PowerDMARC. Let us take care of hosting it in less than 5 minutes
(learn more).
Please enter a valid domain name, without http:// prefix
Please enter a valid SVG file URL
Please enter a valid VMC file URL
Please publish the following BIMI record on your DNS
Type
Host
Value
TXT
Your logo will be displayed here.
How do I make sure my logo is displayed in supported inboxes? Check out our
BIMI Implementation Guide
MTA-STS/TLS-RPT Record Lookup
Use this tool to lookup and validate your MTA-STS/TLS-RPT record.
Please enter a valid domain name, without http:// prefix
What is MTA-STS/TLS-RPT?
Mail Transfer Agent-Strict Transport Security (MTA-STS) is a protocol that makes it mandatory for any outgoing email from the domain to be TLS encrypted before being delivered to the recipient. Transport Layer Security Reporting is a protocol used alongside MTA-STS that enables the domain owner to receive reports with information on emails that failed to be delivered because the receiving server didn’t support TLS encryption.
Valid MTA-STS record
No
Accessible MTA-STS Policy file
No
Valid TLS-RPT record
No
MTA-STS & TLS-RPT have not been enabled for your domain. Enable them in less than 5 minutes by leveraging our hosted PowerMTA-STS feature
(Learn more)
The following MTA-STS DNS TXT record was found for
Valid MTA-STS DNS record
Accessible MTA-STS Policy file
Policy file URL
Hosted MTA-STS
Yes
Disabled
Mode
N/ATestingEnforceNone
MX
No
Hosted MTA-STS & TLS-RPT have not been enabled for your domain. Enable them in less than 5 minutes by leveraging our hosted PowerMTA-STS feature.
Learn more
The following TLS-RPT DNS TXT record was found for
Valid TLS-RPT DNS record
Hosted TLS-RPT
Yes
Disabled
Aggregate Report (RUA) email addresses
No
TLS-RPT Record Generator
Use this tool to generate your TLS-RPT record
TLS-RPT
When you implement TLS Reporting, you’ll get daily aggregate reports with information on emails that don't get encrypted and fail to deliver. Our free TLS-RPT Record Generator creates a TXT record you can publish on your DNS. Get constant reports about the status of email in your domain in one simple step.
Please publish the following TLS-RPT record on your DNS
