Email DNS check

Is your domain set up to send mail?

Check a domain’s MX, SPF, DMARC, and DKIM records and see in plain language what they mean for email delivery and spoofing protection.

Only the domain is looked up. DKIM keys cannot be listed, so enter the selector from a message’s DKIM-Signature header (s=) to check one. The check makes three or four DNS requests.

What the three records do

SPF lists the servers allowed to send mail for a domain. DKIM lets the sending server sign each message with a key published in DNS. DMARC tells receivers what to do when both checks fail, and where to send reports.

Understand DNS records and caching →

What this check cannot tell you

It reads published DNS records only. It does not send a test message, connect to a mail server, or predict whether a message reaches the inbox. Records behind an SPF include are not followed.