Skip to content
trustyourinboxEmail Auth LabTest an email

Test your email authentication

Free, no account

Send one real message to a private address. We read the SPF, DKIM and DMARC results the receiving server recorded, grade them, and show you what to fix.

How it works

  1. 1
    Get a private addressWe make a one-time address the moment you start. Copy it, or scan the code from your phone.
  2. 2
    Send it any emailFrom the account you care about: your work address, your newsletter tool, your CRM.
  3. 3
    See your gradeSPF, DKIM and DMARC are checked as the message lands. You get a grade and the fixes that raise it.
Test an emailAnalyze headers

No signup and no DNS access. We keep the verdict, never the message, and a result deletes itself after 20 minutes unless you share it.

Enforcedyourdomain.comRejection requested for failing mail.Score 96 out of 100.
SPFPassrelaxed align
DKIMPasss=mail
DMARCPassp=reject · aligned

Your email provider · DKIM 2048-bit · via mx.cloudflare.net

Aligned via SPF + DKIM
emailauthlab.comVerdict only. No message stored.

What the grades mean

  • A+Strong authentication and policyStrong aligned DKIM and an enforcement policy. Receivers decide how to handle failing mail.Enforced
  • AAuthentication needs reviewAn enforcement policy is present; a key warning or SPF-only alignment holds back the plus.Enforced
  • A-Limited enforcementThe policy requests reduced or partial enforcement. Receivers decide how to handle failing mail.Enforced
  • BPolicy needs attentionAuthentication checks passed. DMARC enforcement was not established.Not enforced
  • CA pass needs alignmentA method passed, but a DMARC-aligned pass was not established.Not enforced
  • DNo aligned pass establishedAuthentication was attempted, but a DMARC-aligned pass was not established for this message.Not protected
  • FNo usable authenticationNo usable SPF or DKIM result was available for this message.Not protected

More in the lab

Analyze a message's headers

Paste the full headers of any message and see its SPF, DKIM and DMARC results. Nothing you paste is stored.

Open the analyzer

Read a DMARC report

Drop in an aggregate report file and see who sent mail as your domain, in plain words.

Read a report

The Wall

Domains doing email authentication right, in public. Every entry is opt-in and graded from a real message.

See the Wall
This tests one message. trustyourinbox watches every sender on your domain, every day, from the reports receivers send.See how it works