SPF / DMARC / DKIM Checker

Why are your emails landing in spam? Enter your domain. We pull SPF, DMARC and DKIM records from DNS and flag the things that hurt deliverability.

Common selectors:

DNS lookups via Cloudflare DoH (1.1.1.1). No mail is sent — read-only.

FAQ

Why am I being told 'your emails go to spam'?

Most often: missing SPF, missing DMARC, or DMARC set to p=none. Mailbox providers (Gmail, Outlook) increasingly require all three (SPF, DKIM, DMARC) to authenticate, especially for bulk senders.

What's a 'selector' for DKIM?

DKIM keys live at <selector>._domainkey.<your-domain>. The selector name is set by your sending provider (e.g., 'google' for Google Workspace, 's1' or 's2' for SendGrid, 'k1' for Mailchimp). Add the selectors your provider tells you to use.

Is this just a DNS lookup?

Yes — we query Cloudflare's public DNS resolver for TXT records at <domain> (SPF), _dmarc.<domain> (DMARC), and <selector>._domainkey.<domain> (DKIM), plus MX records. No mail is sent.

What should DMARC policy be?

Start with p=none for a few weeks to monitor (using rua=mailto:you@your-domain to collect reports). Once you see SPF/DKIM passing consistently, move to p=quarantine, then p=reject for full protection.

More Website Tools