Free tool
is your email set up to arrive?
Check a domain’s SPF, DKIM and DMARC in one go — the records that decide whether your mail is trusted or spoofed. No sign-up, no email.
what each record actually does.
SPF
Lists the servers allowed to send email for your domain. A receiving server checks the sender against this list — the first line of defence against someone forging your address.
DKIM
Adds a cryptographic signature to every message, tied to a public key published in your DNS. The receiver checks it to confirm the mail really came from you and wasn't altered on the way.
DMARC
Ties SPF and DKIM together and tells receivers what to do when a message fails — nothing, send to spam, or reject. It's also how you find out who is sending mail as your domain.
email that lands, not guesswork.
Business email on our platform ships with SPF and DKIM set up properly from the start, so your mail authenticates instead of landing in spam. When you want DMARC tightened, our UK team does it with you.
email authentication questions
What do SPF, DKIM and DMARC actually do?
They are three DNS records that let receiving mail servers tell your genuine email from a forgery. SPF lists the servers allowed to send for your domain; DKIM adds a signature that proves a message wasn't tampered with; and DMARC tells receivers what to do when a message fails those checks. Together they decide whether your mail is trusted, sent to spam, or used to impersonate you.
Why does the checker say DKIM is not found?
DKIM keys are published under a selector — a name you choose — at selector._domainkey.yourdomain, and there is no way to list them from the outside. When you don't give us a selector we probe the common ones (google, default, selector1 and a few more). If your provider uses a different selector, the check comes back empty even though DKIM is working. Enter your selector in the optional field to check it directly.
My email sends fine — why does this flag a problem?
Sending and authentication are separate. Mail can leave your server and still fail SPF, DKIM or DMARC at the other end, which is what pushes legitimate messages into spam. A missing DMARC record is more serious still: your mail may keep flowing while anyone on the internet is free to send email that looks like it came from your domain.
Do you store the domains I check?
No. Each lookup is passed straight to a public DNS resolver and the result is returned to you; nothing is logged against your search, and there is no sign-up. The tool is rate-limited only to keep it from being abused.