About MailAuthWatch

MailAuthWatch is an email authentication checker and monitoring service. It measures the SPF, DKIM and DMARC records that decide whether a domain's mail is delivered, explains what is wrong in plain English, and, for paying customers, re-measures every day and raises an alert when something changes.

Who it is for

Businesses that send mail from their own domain and cannot afford to have it land in spam, and the agencies and IT teams that look after mail for many client domains. The free checker is open to anyone; monitoring is a flat monthly subscription with no per-seat pricing.

How the measurements work

Every check queries public DNS through independent resolvers and applies the published standards: RFC 7208 for SPF, RFC 6376 and RFC 8301 for DKIM, and RFC 7489 for DMARC. SPF includes are resolved recursively and DNS lookups are counted against the limit of 10. DKIM is discovered by probing selectors used by common providers, and any selectors you add are verified on every run. DMARC reporting addresses on other domains are checked for the authorisation record receivers require.

A lookup that fails is reported as "not measured", never as "missing". The grade is computed from measured results only, and the reasons behind it are printed on every report. See an example report.

What it does not do

It does not read your email, connect to your mail servers, or parse DMARC aggregate reports. It watches the DNS records that most deliverability problems trace back to.

Operator and contact

MailAuthWatch is independently operated by its founder. Billing is handled by Stripe and transactional email by Resend. Support: support@mailauthwatch.com. See also the terms of service and privacy policy.

Our own domain

We hold ourselves to the same standard: mailauthwatch.com's public report is measured by the same code as everyone else's.