Skip to content
D1
EN

Email authentication

letsencrypt.org email authentication

Combined SPF, DMARC, and DKIM validation for this domain.

Email authentication audit

Summary

Email authentication looks healthy

3/3 layers passed

SPF: Pass
DMARC: Pass
DKIM: Pass

Recommendations

SPF, DMARC, and at least one DKIM selector look valid for this domain.

SPF

SPF validation

Record found

Valid SPF record

Query name

letsencrypt.org

Terminal all

-

DNS lookup count

3

SPF record count

1

SPF record

v=spf1 include:_spf.google.com ip4:23.178.112.0/24 ip4:66.133.109.36 ip4:64.78.152.132 include:mail.zendesk.com include:_spf.intacct.com -all

Mechanisms

+include:_spf.google.com+ip4:23.178.112.0/24+ip4:66.133.109.36+ip4:64.78.152.132+include:mail.zendesk.com+include:_spf.intacct.com-all

Recommendations

pair with DMARC Analyzer and DKIM Validator before tightening mail authentication enforcement

DMARC

DMARC analysis

Record found

Valid DMARC record

Policy

reject

Subdomain policy

Alignment

{ "dkim": "r", "spf": "r" }

Enforcement percentage

100

DMARC record

v=DMARC1; p=reject; rua=mailto:[email protected]; fo=1

Reporting

Warnings

relaxed alignment is enabled

DKIM

google

google._domainkey.letsencrypt.org

Valid DKIM record

google._domainkey.letsencrypt.org

DKIM record found

Queried record

google._domainkey.letsencrypt.org

Version

DKIM1

Key type

rsa · 1024 bit

Query time

17 ms

Warnings

1024-bit RSA key: consider upgrading to 2048-bit

Raw TXT record

v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCEBV+uacEmkQqqZMwwF+Kv6oEvaPy/zDOancu+DAemWPty49Sc3PR7n+Il8JGnz8j0Ldv95ch9SGNVuvvRh5PRdoPdNsFjrfkxvSQsC7r1fXMxo2/QnYCTA9f42LB1PMgCUaqKPE3muAUWVq+6w07UTyrY9nCvtuXNm4GZvfAbfwIDAQAB
Public key
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCEBV+uacEmkQqqZMwwF+Kv6oEvaPy/zDOancu+DAemWPty49Sc3PR7n+Il8JGnz8j0Ldv95ch9SGNVuvvRh5PRdoPdNsFjrfkxvSQsC7r1fXMxo2/QnYCTA9f42LB1PMgCUaqKPE3muAUWVq+6w07UTyrY9nCvtuXNm4GZvfAbfwIDAQAB

selector1

selector1._domainkey.letsencrypt.org

No DKIM record found

selector1._domainkey.letsencrypt.org

No DKIM record found

Queried record

selector1._domainkey.letsencrypt.org

Query time

19 ms

Errors

  • no DKIM record found at selector1._domainkey.letsencrypt.org

k1

k1._domainkey.letsencrypt.org

No DKIM record found

k1._domainkey.letsencrypt.org

No DKIM record found

Queried record

k1._domainkey.letsencrypt.org

Query time

19 ms

Errors

  • no DKIM record found at k1._domainkey.letsencrypt.org

s1

s1._domainkey.letsencrypt.org

No DKIM record found

s1._domainkey.letsencrypt.org

No DKIM record found

Queried record

s1._domainkey.letsencrypt.org

Query time

22 ms

Errors

  • no DKIM record found at s1._domainkey.letsencrypt.org

default

default._domainkey.letsencrypt.org

No DKIM record found

default._domainkey.letsencrypt.org

No DKIM record found

Queried record

default._domainkey.letsencrypt.org

Query time

23 ms

Errors

  • no DKIM record found at default._domainkey.letsencrypt.org

Tool switcher

Same target (letsencrypt.org) — open the next tool without retyping.

Full tool catalog

Guides

Practical guides for common Email Auth Checker tasks — DNS records, troubleshooting steps, and links to our free tools.

Back to Email Auth Checker