This is the Email Health Check and the free tools behind it — the individual checks that make up your Email Health Score. Look up, fix and generate the DNS records your email depends on, fast and accurate, each paired with a plain-English guide. Setting up authentication for the first time, or debugging why mail bounces? Start with the Email Health Check for one overall score out of 100, then drill into any individual tool below. Every tool is built and maintained by our deliverability team and runs right in your browser.
Email Health Check
Start here. Enter any domain and we run every authentication check at once — SPF (with its DNS-lookup count), DKIM, DMARC (with its policy), MTA-STS, TLS-RPT and BIMI — then return your Email Health Score out of 100, with the exact fixes ranked.
Enter a domain for its Email Health Score — one grade out of 100 across SPF, DKIM, DMARC, MTA-STS, TLS-RPT and BIMI, with the exact fixes ranked.
Free tool from ToolTrusted. Lookups query public DNS; generators run in your browser.
What we analyze
Your Email Health Score out of 100 is built from four measurable dimensions — every check is a real DNS or blacklist lookup, never a guess:
Authentication
Proves your mail is really from you, so receivers can reject spoofed messages sent in your name.
Infrastructure
Your mail routing and transport security — that mail reaches the right servers over encrypted connections.
Security
Your anti-spoofing posture — whether your policies actually block abuse instead of only monitoring it.
Reputation
Whether your sending domain or IPs appear on the major blocklists right now — checked live, never cached.
Which tool should I use?
You’ve got the full Email Health Check above. To re-check a single record or debug one specific issue, jump straight to the individual tool you need below — each focuses on one signal and pairs with a plain-English guide.
DNS lookups
Check what a domain has published right now. Enter any domain to see its mail servers (MX), its SPF policy (now with a lookup count), or its DMARC policy (now with a plain-English breakdown) — the same records receiving mail servers check on every message.
See which mail servers receive email for a domain, in priority order.
Free tool from ToolTrusted. Lookups query public DNS; generators run in your browser.
Read a domain’s published SPF record and the senders it authorizes.
Free tool from ToolTrusted. Lookups query public DNS; generators run in your browser.
Find a domain’s DMARC policy and reporting address.
Free tool from ToolTrusted. Lookups query public DNS; generators run in your browser.
Look up a domain’s DKIM public key by selector.
Free tool from ToolTrusted. Lookups query public DNS; generators run in your browser.
Look up a domain’s A, TXT or NS records.
Free tool from ToolTrusted. Lookups query public DNS; generators run in your browser.
Diagnostics
Debug a delivery problem: analyze a message’s raw headers to see its path and authentication results, check whether a sending IP or domain is blacklisted, confirm reverse DNS on a sending IP, and — after you change a record — check whether the update has propagated by comparing what Google, Cloudflare and AdGuard each return.
Paste raw email headers to see the delivery path and SPF/DKIM/DMARC results — nothing leaves your browser.
Free tool from ToolTrusted. Lookups query public DNS; generators run in your browser.
Check whether an IP or domain is on a major email blacklist.
Free tool from ToolTrusted. Lookups query public DNS; generators run in your browser.
Find the hostname an IP address points back to.
Free tool from ToolTrusted. Lookups query public DNS; generators run in your browser.
Check whether a DNS change has gone live by comparing answers from Google, Cloudflare and AdGuard.
Free tool from ToolTrusted. Lookups query public DNS; generators run in your browser.
Record generators
Build correct records from scratch — entirely in your browser, with nothing sent anywhere. Generate the record, publish it as a TXT record at your DNS host, then confirm it with the lookups above.
Build a valid SPF record from the services you send with.
Free tool from ToolTrusted. Lookups query public DNS; generators run in your browser.
Create a DMARC record at the right policy level, with reporting.
Free tool from ToolTrusted. Lookups query public DNS; generators run in your browser.
Save & monitor your Email Health
Your Email Health Check isn’t a one-off. Save any scan to your free Email Health Workspace — no password — to keep the full report, track your score over time as you ship fixes, and turn on free monitoring so we re-check your domain automatically and email you the moment SPF, DKIM, DMARC or reputation drifts.
Continue across the platform
ToolTrusted covers the whole email stack. Wherever you go next, it connects back here:
- The ToolTrusted Platform — continuous monitoring, incidents, analytics, recommendations, benchmarking and automation.
- How It Works — the whole Email Health journey — check, report, save, track and monitor.
- Research & Benchmarks — original data on SPF, DKIM and DMARC across 10,000 domains.
- Email Deliverability — reputation, warm-up, blacklists and inbox placement.
- Email Authentication — SPF, DKIM, DMARC, BIMI and the full DNS stack.
- SMTP Services — SES, Mailgun, Postmark and more, ranked on deliverability.
- Email Verification — list cleaning and inbox-placement testing tools.
- Email Security — stop spoofing and phishing, and encrypt delivery.
- Email APIs — transactional and marketing APIs for developers.
- Email Marketing — hands-on platform reviews, comparisons and best-of roundups.
Frequently asked questions
Are these email tools really free?
Yes — every tool on this page is free to use with no sign-up required. They are part of ToolTrusted’s mission to be the trusted resource for email technology, and they pair with our free guides so you can fix issues yourself.
Do the lookup tools store my domain or data?
No. The lookups query public DNS records the same way any mail server does, and we do not store the domains you check. The record generators run in your browser and never send your inputs anywhere.