DMARC, SPF and DKIM monitoring
Email authentication breaks quietly: a DNS edit removes an include, a DKIM record disappears, someone sets DMARC back to p=none. FastPing re-reads your records every six hours and alerts you when they change.
Check details
- Monitor type
- Email security
- Target
- Domain name
- Fastest interval
- 6 hours
- Before a down alert
- A second check after 20 seconds
- Warnings and changes
- Sent on the first check that finds them
- Checked from
- Helsinki, Finland (EU)
How it works
- FastPing reads your MX, SPF, DMARC, DKIM, MTA-STS, TLS-RPT and BIMI records from public DNS.
- It scores them out of 100: missing records, weak policies and an invalid SPF record cost points.
- The monitor warns when the score drops below your minimum, and sends a change alert when your SPF or DMARC record changes or a DKIM selector appears or disappears.
What FastPing checks
- SPF
Presence, a single record, the all qualifier and the number of DNS lookups it causes.
- DMARC
The policy (none, quarantine or reject), the aggregate report address and the percentage.
- DKIM
Keys on 17 common selectors, plus your own selector.
- MTA-STS and TLS-RPT
Protection and reporting for TLS on incoming mail.
Set it up
Run your domain through the free SPF & DMARC checker. Create an Email security monitor, and add your DKIM selector if it is not a common one. Choose the minimum score that should trigger a warning.
Frequently asked questions
If your question is not here, write to us. We reply by email, usually within one business day.
Contact supportWhat score is good?
A means 90 or more: SPF, DKIM and an enforced DMARC policy are in place. A domain with p=none or without DKIM typically scores B or C.
Do domains that never send email need DMARC?
Yes. Publishing "v=spf1 -all" and a DMARC policy of p=reject stops others from sending mail in the domain's name.
Does FastPing read my DMARC reports?
No. FastPing checks the DNS records. Aggregate reports go to the address in your rua= tag.
Related monitoring
- Blacklist monitoringMail server IPs and domains checked against DNS blocklists such as Spamhaus every six hours.
- DNS monitoringChange alerts for A, MX, NS, TXT, CAA and other records, as public resolvers see them.
- Mail server monitoringSMTP, IMAP and POP3 servers: greeting, STARTTLS or TLS and certificates, without logging in.
Start with the free plan
3 monitors, checks every 5 minutes and 1 status page. No payment details needed.
Spamhaus is a trademark of its owner. FastPing is not affiliated with or endorsed by its owner.