Free tool
SPF, DKIM and DMARC checker
Find out why email from your domain lands in spam. We check the four DNS records that decide it and tell you exactly what to change.
How it works
Enter your domain
Type the domain you send email from, or any address at it. Add your DKIM selector if you know it.
We read four records
MX (who receives your mail), SPF (who may send it), DKIM (the signing key) and DMARC (what receivers do when checks fail).
Fix what is flagged
Each problem comes with plain steps and the record to add, tailored to your email provider when we can recognise it.
Email DNS checker: questions and answers
Missing or broken SPF, DKIM or DMARC records are the most common technical reason. Since 2024 Gmail and Yahoo require all three from bulk senders. Content, sending reputation and blocklists matter too.
It is the name under which your provider publishes its signing key, such as google, selector1 or default. You can see it as s= in the DKIM-Signature header of any email you send.
No. A domain may publish exactly one SPF record. Two records make SPF fail for every message, so merge them into one.
Start with p=none and a rua= address to receive reports. Once the reports show only your own services, move to p=quarantine and then p=reject.
Want this handled for you?
Register your domain with GlobalHostia and get DNS, SSL and email set up by our team, with support around the clock.