Free tool
SPF, DKIM and DMARC checker
Check a domain's email authentication records and see exactly what to fix. Free, no sign-up, nothing stored.
In short
Enter a domain to read its SPF, DMARC and MX records from public DNS - add a DKIM selector to check that key too. Each record gets a plain-English verdict: what’s correct, what’s risky and what will make mail fail.What the results mean
SPF lists the servers allowed to send for a domain, DKIM signs every message, and DMARC tells receivers what to do when both fail. Read the full explanation in SPF, DKIM and DMARC explained.
Questions
How do I check my SPF record?
Enter your domain above. The checker reads the TXT records at your domain, finds the v=spf1 record, and warns about duplicates, the 10-lookup limit and a missing or permissive all mechanism.
How do I find my DKIM selector?
Open an email you sent, view the original headers, and find the DKIM-Signature header. The s= value is the selector and d= is the domain. Enter the selector above to check that key.
What DMARC policy should I use?
Start with p=none and a rua reporting address, read the reports for a few weeks, then move to p=quarantine and p=reject once only your own services send as your domain.
Send your first email in minutes
6,000 emails a month (up to 200 a day), free forever. No card needed.