SPF, DKIM and DMARC Checker
Enter the domain you send email from. We read its public DNS records and show which of SPF, DKIM and DMARC are missing or broken. You also see which one to fix first.
Run the check- Live DNS lookup
- SPF, DKIM and DMARC
- The record to fix first
What the checker looks at
SPF lists the servers allowed to send mail for your domain. A domain needs exactly one SPF record. Two records break both.
DKIM signs each email with a key published under a selector, such as google._domainkey. Without the selector there's nothing to look up, so the checker marks DKIM as unknown until you add it.
DMARC tells inboxes what to do when SPF or DKIM fails: none only reports, quarantine sends the email to spam and reject blocks it.
What the checker can't see
It reads public DNS only. It can't see whether your email platform signs with the key it publishes, whether your sending IP is on a blocklist, or what your DMARC reports say. Use it as a first pass, then send a test email to check the full chain.
Common questions
How do I check SPF, DKIM and DMARC?
Enter your sending domain and, if you know it, your DKIM selector. The checker reads the public DNS records and shows each one as present, missing, duplicated or broken.
Why does DKIM show as unknown?
DKIM keys sit under a selector name that only your email platform knows. Add the selector from a sent email's DKIM-Signature line (the s= value) and run the check again.
Can a domain have two SPF records?
No. Two SPF records make SPF fail for every email. Merge them into one record that lists all your senders.
Which DMARC policy should I use?
Start with p=none and a reporting address to see who sends as you. Move to quarantine, then reject, once the reports show only your own senders.
Do Google and Yahoo require these records?
Yes. Since 2024, both require SPF or DKIM for all senders, and SPF, DKIM and DMARC for bulk senders of 5,000 or more messages a day to their users.
Do you store the domains I check?
No. We keep a result for 10 minutes so a repeat check loads at once, then we delete it. We never store your email or IP address.
Free email setup review
Get your email setup reviewed
Share your domain and the tools you send from. We reply within 24 hours with the exact records to add or fix.
- SPF that covers every sender
- DKIM signing for each platform
- A DMARC policy you can tighten
- Where your emails land today
Cancel with 30 days’ written notice. You keep every account and all your data.
You're All Set!
We have your request.
Expect a reply from our team within 24 hours. Want to talk sooner? Pick a time below.