More free tools

Will your email land in the inbox?

Type a domain to read its SPF, DMARC, and DKIM records from public DNS. You see each record as it is published and what to change, so receipts, password resets, and newsletters from your domain stay out of spam. No account needed.

Check a domain

What the checker reads

Three DNS lookups over a public resolver. Your mail server is never contacted and no test email is sent.

  • SPFThe TXT record on your domain that starts v=spf1: whether there is exactly one, and whether it ends with ~all or -all.
  • DMARCThe TXT record at _dmarc.yourdomain: whether it exists and which policy it sets (none, quarantine, or reject).
  • DKIMPublic keys at common selectors: google, default, selector1, selector2, k1, resend, and s1. A domain's own selectors cannot be listed from outside, so a key elsewhere is not found.

What the result means, and how to fix it

SPF lists the services allowed to send mail as your domain. DKIM signs each message so a receiver can tell it was not changed. DMARC ties the two to the address in the From line and tells receivers what to do with mail that fails. Gmail and Yahoo expect all three from anyone sending mail in bulk, and they help every sender.

SPF: one record, ending in ~all or -all

Add one TXT record on the bare domain with an include for each service that sends as you, like your mailbox provider and your newsletter or app email service. Each provider's setup page gives you its include.

# TXT record on example.com
v=spf1 include:_spf.google.com include:amazonses.com ~all

Two SPF records on one domain is an error: receivers ignore both. Merge them into one line. Keep the includes few, since SPF allows only ten DNS lookups in all.

DMARC: start with reports, then enforce

Add a TXT record at _dmarc.yourdomain. Start with p=none and a rua address so you get reports of who sends as you. Once the reports show only your own services passing, move to p=quarantine, then p=reject.

# TXT record on _dmarc.example.com, to start
v=DMARC1; p=none; rua=mailto:dmarc@example.com

# Once the reports look clean
v=DMARC1; p=quarantine; rua=mailto:dmarc@example.com

DKIM: turn it on at each sender

DKIM is set up at the service that sends the mail. Your mailbox provider and email service each give you a record to add, at a name like google._domainkey or s1._domainkey. If the checker found no key, open that service's domain settings and confirm DKIM shows as verified there.

Email records are one part of the free audit. It also reads your pages, sitemap, robots.txt, page speed, social previews, structured data, and llms.txt. In LopeBase it runs again whenever you like, for every site you run.

Run the full free audit Start free

SPF, DMARC, and DKIM questions

Something else? Contact us.

What is the difference between ~all and -all?

Both end an SPF record by saying what to do with senders not listed. ~all (soft fail) asks receivers to treat that mail with suspicion, and -all (hard fail) says to reject it. Either one counts as a complete record here. Without one, SPF does not say anything about other senders.

Is p=none a problem?

It is a fine place to start, since it only asks for reports. It does not protect your domain, though: mail that fails still gets delivered. Move to p=quarantine once the reports show only your own services sending.

Why does it say no DKIM when I have it set up?

DKIM keys live at a selector chosen by your email service, and DNS has no way to list them. The checker tries the common ones. If yours uses another name, the key is there but not found; your provider's domain settings will show whether it is verified.

Does this send a test email?

No. It only reads public DNS records, so it cannot tell whether a particular message passed. To test a real message, send one to a Gmail address and open "Show original", which shows SPF, DKIM, and DMARC results.

Do you store the domain I check?

No. The check runs once and the answer comes straight back to this page. Nothing is saved and no email is sent.

Free SEO audit Every check at once, in a report you can share.AI crawler checker Whether robots.txt blocks GPTBot, ClaudeBot, and the rest.Open Graph checker How a shared link to your page looks.Structured data checker The JSON-LD on a page, with missing fields.llms.txt checker Whether your site has a plain-text guide for AI tools.Uptime in LopeBase Know when a site or service is down, for every product.

Can we use Google Analytics cookies to see which pages help? Cookie policy