SPF, DKIM & DMARC Checker
Check a domain's email authentication
Look up the DNS records that decide whether your email reaches the inbox and whether someone else can send mail pretending to be you. SPF, DMARC and MX are read directly; DKIM is checked against the selectors that common mail providers use.
Frequently asked questions
What happens if I have no SPF record?
Anyone can send email claiming to be from your domain, and receiving servers have no way to tell. Most providers then treat your legitimate mail with more suspicion too.
What should my DMARC policy be?
Start at p=none to collect reports without affecting delivery, confirm your legitimate senders all pass, then move to p=quarantine and finally p=reject. Going straight to reject will bounce mail you did not know you were sending.
Why can't you always find my DKIM record?
DKIM records live at a selector name you choose, and there is no way to list them from DNS. We test the selectors used by the major providers; a custom selector will not be found even though it exists.