Free tool
SPF, DKIM & DMARC checker
Enter a domain to see its SPF, DKIM and DMARC records, the three DNS records that decide whether your email reaches the inbox.
This runs a public DNS lookup only. Nothing is sent, stored or added to any account.
What this checks
SPF
SPF lists which servers may send email for your domain. It is published as a DNS TXT record and checked against the return-path.
DKIM
DKIM adds a signature to each message, verified against a public key in your DNS, so receivers know the mail is really from you and was not tampered with.
DMARC
DMARC ties SPF and DKIM to your visible From address and tells receivers what to do when a message fails. Start at p=none, then tighten to reject.
For the full detail, read SPF, DKIM and DMARC explained What is a sending domain?
Common questions
- What do SPF, DKIM and DMARC do?
- They are the three DNS records that authenticate your email. Together they prove a message really came from your domain, which is what decides whether it reaches the inbox or the spam folder.
- Why can't you always find DKIM?
- DKIM is published under a selector that the sender chooses, so there is no single place to look. This tool probes the selectors common providers use; if your provider uses a custom selector, DKIM may exist even when this shows none.
- A record is missing. What should I do?
- Publish the missing record in your DNS. Your email provider generates the values; see our guides for what each record does, and start DMARC at p=none before tightening it.
- Is this tool free?
- Yes. It runs a public DNS lookup and shows the result. It does not send email, store your domain, or require an account.
Let Mailhuset set these up for you
Verify a domain with Mailhuset and we generate the SPF, DKIM and DMARC records for you, then monitor them so your transactional email keeps arriving.