Free SPF, DKIM, and DMARC Record Checker
Check your domain's email authentication records (SPF, DKIM, and DMARC) to ensure proper email deliverability and protect your domain from spoofing and phishing attacks.
Enter Your Domain
What are SPF, DKIM, and DMARC?
SPF (Sender Policy Framework)
SPF is an email authentication method that specifies which mail servers are authorized to send email on behalf of your domain. It helps prevent email spoofing by allowing receiving mail servers to verify that incoming mail from a domain comes from an IP address authorized by that domain's administrators.
DKIM (DomainKeys Identified Mail)
DKIM adds a digital signature to your emails that receiving mail servers can verify. This signature confirms that the email hasn't been altered in transit and that it genuinely comes from your domain. DKIM uses cryptographic authentication to ensure email integrity.
DMARC (Domain-based Message Authentication, Reporting, and Conformance)
DMARC builds on SPF and DKIM by adding reporting capabilities and instructing receiving mail servers what to do if authentication fails. It provides visibility into who is sending email on behalf of your domain and helps protect against phishing and spoofing attacks.
Why Are These Records Important?
- Improved Deliverability: Properly configured authentication records increase the likelihood that your emails reach recipients' inboxes
- Brand Protection: Prevent attackers from sending fraudulent emails that appear to come from your domain
- Compliance: Many organizations require proper email authentication for business communications
- Reputation Management: Maintain a good sender reputation with email providers
- Visibility: DMARC reports provide insights into email authentication failures and potential abuse
How to Fix Issues
If this tool identifies missing or invalid records, you'll need to add or update DNS TXT records for your domain. The exact process depends on your DNS provider (GoDaddy, Cloudflare, Google Domains, etc.). Most email service providers (Google Workspace, Microsoft 365, etc.) provide specific instructions for configuring these records with their services.
Security and Privacy
This tool performs standard DNS queries to check your domain's public DNS records. No private information is accessed or stored. All checks are performed in real-time and results are not saved. For more information, read our privacy policy .