Skip to content
Get a Free Audit

SPF, DKIM and DMARC checker and generator

Check if your domain’s email is protected from fake senders, and why emails land in spam. See SPF lookups, DKIM keys and DMARC policy with simple fixes. Make correct SPF and DMARC records for Google Workspace, Microsoft 365 and more.

This tool needs JavaScript. Please turn it on, or open the page in a current browser.

How to use this tool

  1. Enter your domain Type your domain or any email address on it.
  2. Click Check We read SPF, DKIM and DMARC from public DNS in your browser.
  3. Read the three cards Green is good, yellow needs work, red is missing or broken. Each problem has a fix.
  4. Make missing records Use the SPF or DMARC generator, then copy the record.
  5. Add to your DNS Add it as a TXT record in your domain’s DNS panel, then check again.

SPF

  • Only one SPF record per domain.
  • List every service that sends email for you.
  • Stay within 10 DNS lookups.

DKIM

  • Turn on DKIM in your email provider’s admin panel.
  • Use 2048-bit keys when possible.
  • Each sending service has its own selector.

DMARC

  • Start with p=none and a report address.
  • Fix failing services, then move to quarantine and reject.
  • Use a separate mailbox for reports.

Questions about this tool

Why do my emails go to spam?

Missing or broken SPF, DKIM or DMARC is a common reason. Content, links and sender reputation also matter.

Where do I add these records?

In the DNS panel where your domain is managed (GoDaddy, Hostinger, Cloudflare, BigRock and others), as TXT records.

Why is DKIM not found?

We try common selectors. Your provider may use another one; find it in the admin panel and enter it.

Is p=none safe?

Yes, it only collects reports. But it does not stop fake emails, so move to quarantine later.

Is my domain sent to your server?

No. Your browser asks public DNS (Google or Cloudflare) directly.