Free Email Checker Email Authentication
SPF, DKIM & DMARC Checker
Free SPF, DKIM and DMARC checker – look up the raw email authentication records for any domain and see the DMARC policy explained in plain language.
Want unlimited checks?
Get started free – no card needed, 30 more checks the moment you verify your email.
Why these three records matter
SPF, DKIM and DMARC are the three DNS-based standards that let receiving mail servers confirm a message genuinely came from the domain it claims to be from. Together they are the main defense against spoofing and phishing, and major inboxes such as Gmail and Yahoo now require all three to be correctly configured for bulk senders.
What each record does
- SPF – lists which mail servers are allowed to send on behalf of the domain.
- DKIM – attaches a cryptographic signature to outgoing mail so receivers can confirm it was not altered in transit.
- DMARC – tells receiving servers what to do when a message fails SPF or DKIM (monitor, quarantine, or reject), and where to send reports.
What this tool returns
Rather than a simple pass/fail, this checker pulls and displays the actual raw TXT records for the domain entered, plus the DMARC policy in plain language. A known DKIM selector can also be checked directly, since DKIM records are published under a selector-specific subdomain and cannot otherwise be found by guessing.
If any of the three records is missing, that is the first thing to fix – deliverability problems and messages landing in spam very often trace back to an incomplete SPF/DKIM/DMARC setup.
Frequently Asked Questions
Why do my emails land in spam even though I have SPF set up?
SPF alone is rarely enough – major inboxes now expect DKIM and DMARC to be configured correctly as well, and a missing or misconfigured DMARC record is a very common cause.
Can this tool find my DKIM record automatically?
DKIM is published under a selector-specific subdomain, so it can only be checked if you know (or guess) the selector – enter it directly if your provider hasn't told you.
What is the difference between a DMARC policy of "none", "quarantine" and "reject"?
"None" only monitors and reports; "quarantine" sends failing mail to spam; "reject" blocks it outright – most domains start at "none" and tighten the policy once reports confirm legitimate mail isn't affected.