SPF, DKIM & DMARC Checker
Enter a domain to review its SPF, DKIM and DMARC records and get plain explanations of anything that needs attention.
Este contenido está en inglés.
Ejemplos resueltos
Checking a domain sends email safely
example-shop.co.uk typed in with the DKIM selector left blank
SPF: v=spf1 include:_spf.example-mail.net -all DKIM: a common selector found with a public key DMARC: v=DMARC1; p=reject
This is an illustrative result; each record tells receiving mail systems which senders are allowed and what to do with failures.
Finding a missing DMARC record
example-club.org.uk typed in with a DKIM selector of mail2026
SPF: v=spf1 mx -all DKIM: selector mail2026 found DMARC: not found. Add a TXT record at _dmarc starting v=DMARC1.
A missing DMARC record means receiving systems have no instructions for failed checks, so adding one is the usual next step.
Sobre SPF, DKIM & DMARC Checker
SPF, DKIM and DMARC are three records that tell receiving mail services whether a message really comes from your domain. Enter a domain and this tool looks up all three, shows what it found and explains anything that needs attention in plain language. Correct records help genuine email reach the inbox and make it harder to forge your name.
SPF lists the servers allowed to send for you, DKIM adds a signature to each message, and DMARC says what to do when checks fail and where to send reports. For DKIM you can enter a selector, the name chosen by whoever sends your email. If you leave it blank, a list of common selector names is tried.
Cómo usar SPF, DKIM & DMARC Checker
- Type your domain name, such as example.com.
- Add a DKIM selector if you know it, or leave it blank.
- Select Check records.
- Work through any items marked Check or Fix, starting with SPF and DMARC.
Usos habituales
- Finding out why email from your domain lands in spam
- Checking records after changing email provider
- Reviewing a domain before setting up a DMARC policy
- Confirming a new sending service has been added correctly
Preguntas frecuentes
What do SPF, DKIM and DMARC do?
SPF names the servers allowed to send email for a domain. DKIM attaches a signature that proves a message was not altered and came from the domain. DMARC builds on both, telling receivers what to do with failures and asking for reports on who is sending as you.
What is a DKIM selector?
A selector is a label that points to one DKIM key in your DNS. It is chosen by the service that sends your email, and the key is published at selector._domainkey followed by your domain. Your email provider's setup instructions or a message header will show the selector.
What does too many DNS lookups mean for SPF?
SPF allows a maximum of ten lookups when a receiver evaluates the record. Each include, a, mx, exists and redirect counts. Go over the limit and receivers may treat the record as broken. Remove services you no longer use, or ask providers for shorter records.
What DMARC policy should I use?
Many domains start with a policy of none and a report address, so they can see who sends email as the domain without affecting delivery. Once all legitimate senders pass the checks, the policy can move to quarantine and then reject, which gives the most protection.
Why was no DKIM record found?
The selector used by your sender may not be one of the common names that are tried. Enter the selector if you know it. DKIM is also only published by services that sign your email, so a domain that does not send mail may legitimately have none.