Skip to main content
Select DNS Tools in the left navigation to reach five tools, each on its own tab. They read live DNS and return a structured result, and they work on any domain, including domains that are not in your account.

One builds, four report

The names tell you which is which. The DMARC Configurator is the only tool that changes anything: it walks you from a domain to a finished record with publishing instructions, and it covers all four record types. The four Checkers read what is already published and tell you what is wrong, without altering it.

DMARC Configurator

A four-step wizard that reads your DNS, then builds a DMARC, SPF, DKIM, or BIMI record you can publish.

DNS Checker

Nameservers, DNS provider, DMARC policy, and TXT records for a domain, in one scan.

SPF Checker

Validates your SPF record, counts your DNS lookups against the limit of ten, and shows how each mechanism resolves.

DKIM Checker

Finds DKIM records by scanning 19 common selectors, or looks up a selector you name.

BIMI Checker

Checks whether your domain publishes a BIMI record, and what to put in place before your logo will display.
The four Checkers appear in the app as DNS Scanner, SPF Scanner, DKIM Scanner, and BIMI Scanner. Each page below names the tab it lives on.

When to use them

  • Setting up email authentication on a new domain
  • After changing DNS settings or switching email providers
  • Troubleshooting a deliverability problem
  • Auditing a domain you have just taken over
  • Checking a domain that is not in your account
For a domain already in your account, DMARC Management configures and publishes policy from the domain’s own detail view.