Email Authentication
SPF, DKIM & DMARC Checker
Free SPF, DKIM and DMARC checker with an instant Gmail/Yahoo bulk-sender readiness badge – look up the raw email authentication records for any domain and see the DMARC policy explained in plain language.
Want unlimited checks?
Get started free – no card needed, 5 more checks the moment you verify your email.
Why these three records matter
SPF, DKIM and DMARC are the three DNS-based standards that let receiving mail servers confirm a message genuinely came from the domain it claims to be from. Together they are the main defense against spoofing and phishing, and major inboxes such as Gmail and Yahoo now require all three to be correctly configured for bulk senders.
What each record does
- SPF – lists which mail servers are allowed to send on behalf of the domain.
- DKIM – attaches a cryptographic signature to outgoing mail so receivers can confirm it was not altered in transit.
- DMARC – tells receiving servers what to do when a message fails SPF or DKIM (monitor, quarantine, or reject), and where to send reports.
What this tool returns
Along with the raw TXT records and the DMARC policy explained in plain language, the checker shows a single "Ready" / "Not ready" badge for Gmail and Yahoo's bulk-sender requirements, so there's no need to mentally combine three separate results to answer the one question that usually matters: can this domain send bulk mail without getting flagged?
A known DKIM selector can also be checked directly, since DKIM records are published under a selector-specific subdomain and cannot otherwise be found by guessing.
If any of the three records is missing, that is the first thing to fix – deliverability problems and messages landing in spam very often trace back to an incomplete SPF/DKIM/DMARC setup.
Frequently Asked Questions
Why do my emails land in spam even though I have SPF set up?
SPF alone is rarely enough – major inboxes now expect DKIM and DMARC to be configured correctly as well, and a missing or misconfigured DMARC record is a very common cause.
Can this tool find my DKIM record automatically?
DKIM is published under a selector-specific subdomain, so it can only be checked if you know (or guess) the selector – enter it directly if your provider hasn't told you.
What is the difference between a DMARC policy of "none", "quarantine" and "reject"?
"None" only monitors and reports; "quarantine" sends failing mail to spam; "reject" blocks it outright – most domains start at "none" and tighten the policy once reports confirm legitimate mail isn't affected.
What does the "Ready for Gmail/Yahoo bulk sending" badge mean?
Google and Yahoo require senders of roughly 5,000+ daily messages to have SPF, DKIM, and a published DMARC record (any policy, including "none", meets the minimum bar). The badge is green once all three are found – it checks only what DNS can confirm, not full deliverability (e.g. DMARC alignment or reverse-DNS/PTR records aren't covered).