Email deliverability check
Comprehensive email security checker that validates SPF, DKIM, DMARC, MX records, and Domain Keys. Check all your email authentication records in one place — including a recursive SPF walk against the 10-lookup limit and a DKIM search across common selectors.
No result yet
Enter a domain to check its email authentication records.
What this check means
Inbox providers decide whether to deliver, quarantine, or reject your mail based on the authentication signals your domain publishes in DNS. This tool reads those records the same way a receiving mail server does:
- MX records — where mail for your domain is delivered.
- SPF — which servers may send mail for your domain. The checker follows
include:andredirect=mechanisms recursively and counts DNS lookups against the SPF limit of 10. - DKIM — cryptographic signing keys, discovered by probing 18 common selectors (default, selector1, selector2, google, and others) plus provider-specific selectors for major mailbox services.
- DMARC — the policy that tells receivers what to do when SPF or DKIM fail. A policy of "quarantine" or "reject" is also a BIMI prerequisite.
- Domain Keys — the older predecessor to DKIM. Most domains no longer publish it, and that is normal.
How to fix common issues
- No SPF record: add a TXT record starting with
v=spf1that lists your sending services, ending with~allor-all. - SPF over the lookup limit: flatten includes or remove unused services — records over 10 DNS lookups fail SPF evaluation.
- No DKIM found: your provider may use a non-standard selector. Check your
provider's documentation — the record lives at
selector._domainkey.yourdomain.com. - DMARC policy "none": once you are confident legitimate mail passes SPF and DKIM, move the policy towards "quarantine" and then "reject".
Once all four modern records pass, your domain is ready for the final step of inbox branding — check it with the BIMI checker.
Related guides
- BIMI and DMARC — why enforcement matters, and the safe path to
p=reject. - What is BIMI? — how inbox branding builds on these records.
- DKIM Studio — inspect a DKIM signing key by selector.
- DNS Studio email validator — check MX, SPF and DMARC records.