SPF, DKIM and DMARC Checker

Why do your emails need these three records?

Gmail, Outlook and other providers use SPF, DKIM and DMARC to check whether an email really comes from the domain it claims. Emails from domains missing these records land in spam or aren't delivered at all. Since 2024, Gmail and Yahoo require all three for domains that send bulk email.

Frequently asked questions

What is SPF?

SPF (Sender Policy Framework) is a DNS TXT record listing which servers may send email for your domain. The receiving server checks whether the email came from one of them. A domain can have only one SPF record.

What is DKIM?

DKIM is a digital signature added to every email you send. The receiving server verifies it with the public key on your domain, proving the email wasn't changed and really came from you. The record is added as "selector._domainkey.yourdomain.com".

What is DMARC and why is it needed?

DMARC tells receivers what to do with emails that fail SPF and DKIM: none (monitor only), quarantine (send to spam) or reject. Gmail and Yahoo expect at least a "v=DMARC1; p=none;" record from domains that send bulk email.

I added the records but the tool still shows them missing?

DNS changes can take from a few minutes up to 24 hours to propagate. Make sure the record name (e.g. "_dmarc") and type (TXT) are correct, then check again later.