Resources

Record Checkers

Mimecast’s free SPF, DKIM, BIMI, and DMARC checker tools give security and IT teams a fast way to check domain health and identify misconfigurations.

Why use Mimecast’s free checker tools

Get answers without guesswork
Each checker provides immediate visibility into DNS and authentication issues, helping teams diagnose problems without manual record checks or fragmented tooling.
Real-world enterprise enforcement
Unlike generic lookup tools, Mimecast’s checkers reflect how mailbox providers evaluate authentication, enforcement, and message identification at scale.
Use standalone or as a toolkit
Whether you need a quick DMARC check or a full SPF–DKIM–DMARC analysis, these tools work independently or together to support stronger authentication.

DMARC Record Checker

Validate policy status and enforcement readiness

The DMARC Record Checker analyzes whether a DMARC record exists for your domain and confirms whether it is syntactically valid. It also surfaces the current DMARC policy state (monitoring, quarantine, or reject) so teams can quickly understand their enforcement posture.

What it checks:

Alignment with expected enforcement goals
Presence of a valid DMARC TXT record
Alignment with expected enforcement goals

Run DMARC Checker

DKIM Record Checker

Confirm DKIM publication and alignment

The DKIM Record Checker verifies whether a DKIM record is correctly published and accessible in DNS. It checks selector availability and confirms whether the public key is reachable, which is essential for DKIM authentication and downstream DMARC enforcement.

What it checks:

DKIM selector and DNS record availability
Key publication and lookup success
Readiness for DMARC alignment

Run DKIM Checker

SPF Record Checker

Validate SPF syntax and sending sources

The SPF Record Checker evaluates whether your SPF record is correctly configured and within lookup limits. It helps teams identify missing include mechanisms, misconfigured sending sources, or conditions that may trigger SPF permerror during authentication.

What it checks:

SPF syntax and mechanism structure
Total SPF lookups and limits
Authorized sending sources

Run SPF Checker

BIMI Record Checker

Confirm readiness for brand indicators in the inbox

The BIMI Record Checker validates whether a BIMI record is published correctly and whether your domain meets the technical prerequisites for logo display in supported inboxes. This includes DNS readiness and alignment with DMARC enforcement requirements.

What it checks: