Fast, accurate, and privacy-first email verification. Validate syntax, domain, MX records, SPF/DKIM/DMARC, detect disposable emails, suspicious patterns, and more.
Everything you need to validate email addresses and protect your application from invalid, fake, or malicious emails.
RFC-compliant email format validation to catch typos and invalid addresses.
Verify domain exists and has MX records configured to receive mail.
Detect temporary and disposable email addresses from 4000+ providers.
Identify role-based addresses like admin@, support@, info@.
Detect domains configured to accept mail for any address.
Suggest corrections for common domain typos like gmial.com.
Parse and validate SPF records, check DNS lookup limits, analyze mechanisms.
Check 30+ common DKIM selectors (Google, SendGrid, Mailchimp, etc.).
Validate DMARC policy, alignment modes, and reporting configuration.
Detect bot-generated emails, keyboard patterns, spam keywords with red flags.
Verify if email has an associated Gravatar profile (indicates real person).
Identify emails on subdomains (mail.example.com) and extract root domain.
SMTP-based signals suggesting whether the mailbox is actively used.
Lightning-fast results with intelligent long-term caching. Valid emails stay valid.
Identify Gmail dots, plus addressing, and return canonical address.
Validate up to 100 emails in a single API request with rate limiting protection.
Enter an email address to see the comprehensive validation in action.
You've used all 10 demo validations. Get a free API key to continue with 10,000 validations per month!
Start free, upgrade when you need more.
Perfect for getting started
For high-volume applications
Special intro pricing!
Everything you need to know about email validation
Email validation is the process of verifying that an email address is valid, deliverable, and safe to send to. It checks syntax, domain existence, MX records, and can detect disposable or role-based addresses. This helps improve email deliverability and protect your sender reputation.
The free tier includes 10,000 email validations per month, which is perfect for small projects, startups, and testing. No credit card required to get started.
Our API performs comprehensive validation including:
Yes! We only store MD5 hashes of email addresses in our cache - never the actual email addresses. This means even if our database were compromised, no personally identifiable email addresses could be extracted. Your users' privacy is protected by design.
Yes! Our batch endpoint allows you to validate up to 100 emails in a single API request. This is perfect for validating email lists, cleaning up databases, or processing signup forms with multiple addresses.
Yes! We offer an official EmailValidatr.Client NuGet package for .NET developers. It provides a strongly-typed client with async methods, dependency injection support, and helper methods like IsValidAsync(), IsDisposableAsync(), and more.
dotnet add package EmailValidatr.Client
Get started in minutes with our simple API.
# Validate with all features
curl -X GET "https://emailvalidatr.com/api/validate?email=user@example.com&includeDomainAuth=true" \
-H "X-API-Key: your_api_key"
# Deep verification (SMTP check)
curl -X GET "https://emailvalidatr.com/api/validate?email=user@example.com&deep=true" \
-H "X-API-Key: your_api_key"
# Batch validation
curl -X POST "https://emailvalidatr.com/api/validate/batch" \
-H "Content-Type: application/json" \
-H "X-API-Key: your_api_key" \
-d '{"emails": ["user1@example.com", "user2@example.com"], "include_domain_auth": true}'
// Full validation with all features
const response = await fetch(
'https://emailvalidatr.com/api/validate?email=user@example.com&includeDomainAuth=true',
{ headers: { 'X-API-Key': 'your_api_key' } }
);
const result = await response.json();
// Access quality indicators
console.log('Has Gravatar:', result.validations.quality_indicators?.has_gravatar);
console.log('Suspicious:', result.validations.quality_indicators?.suspicious_patterns?.is_suspicious);
console.log('Red Flags:', result.validations.quality_indicators?.suspicious_patterns?.red_flags);
// Access domain authentication
console.log('SPF Valid:', result.validations.domain_authentication?.spf?.is_valid);
console.log('DKIM Found:', result.validations.domain_authentication?.dkim?.exists);
console.log('DMARC Policy:', result.validations.domain_authentication?.dmarc?.policy);
console.log('Auth Score:', result.validations.domain_authentication?.authentication_score);
// Using EmailValidatr.Client NuGet package
using EmailValidatr.Client;
var client = new EmailValidatrClient("your_api_key");
// Full validation with domain auth
var result = await client.ValidateAsync("user@example.com", new ValidationOptions
{
DeepVerification = true,
IncludeDomainAuth = true
});
// Check quality indicators
Console.WriteLine($"Has Gravatar: {result.Validations.QualityIndicators?.HasGravatar}");
Console.WriteLine($"Suspicious: {result.Validations.QualityIndicators?.SuspiciousPatterns?.IsSuspicious}");
// Check domain authentication
var domainAuth = result.Validations.DomainAuthentication;
Console.WriteLine($"SPF Valid: {domainAuth?.Spf?.IsValid}");
Console.WriteLine($"Auth Score: {domainAuth?.AuthenticationScore}");
// Quick checks
bool isSuspicious = await client.IsSuspiciousAsync("spam123456@example.com");
bool? hasGravatar = await client.HasGravatarAsync("user@example.com");
# Check domain authentication only (SPF/DKIM/DMARC)
curl -X GET "https://emailvalidatr.com.com/api/domain-auth?domain=example.com" \
-H "X-API-Key: your_api_key"
# With custom DKIM selectors
curl -X POST "https://emailvalidatr.com.com/api/domain-auth" \
-H "Content-Type: application/json" \
-H "X-API-Key: your_api_key" \
-d '{"domain": "example.com", "dkim_selectors": ["google", "selector1", "custom"]}'
# Response includes:
# - SPF: record, mechanisms, all_mechanism, warnings
# - DKIM: selectors_found, public key status
# - DMARC: policy, subdomain_policy, percentage, rua/ruf
# - authentication_score: 0-100 based on configuration
We never store email addresses. Only MD5 hashes are used for usage tracking, ensuring your data stays private and compliant with GDPR, CCPA, and other privacy regulations.
Have questions, feedback, or need support? We'd love to hear from you.
By registering, you agree to our terms of service. We'll only use your email to send important updates about your API key.
Important: Copy and save this key now. It won't be shown again.