SPF, DKIM and DMARC checker
Enter your domain and we'll check the records that decide whether your emails reach the inbox. You'll see what's missing, what's broken and how to fix it.
What these records do
Mailbox providers like Gmail and Outlook check three DNS records before they trust an email. If any of them is missing or wrong, your mail is much more likely to land in spam, or be rejected outright.
SPF
A list of the servers allowed to send email for your domain. Mail from anywhere else looks forged.
DKIM
A digital signature on every email you send, so the receiver can tell it wasn't changed on the way.
DMARC
Tells receivers what to do when SPF or DKIM fail, and sends you reports about who uses your domain.
Want the full walkthrough? Read our SPF, DKIM and DMARC guide.
Questions
Do I need SPF, DKIM and DMARC?
Yes, if you send more than a handful of emails. Since 2024 Gmail and Yahoo require all three from bulk senders, and mail without them is far more likely to go to spam or be rejected.
Why does the checker say no DKIM was found when I set it up?
DKIM keys live under a selector name that only your provider knows. We try the common ones. Open an email you sent, find the DKIM-Signature header and enter its s= value as the selector.
How long do DNS changes take to show up?
Usually a few minutes, sometimes up to a few hours depending on the TTL of the record. Run the check again after you make a change.
Do you store the domains I check?
No. The check runs live against public DNS and nothing is saved.
More free checks
Records fixed? Warm the domain up next.
A new domain with perfect DNS can still land in spam. Warmup builds its reputation slowly with real conversations.