Free SPF, DKIM, and DMARC Record Checker

What are SPF, DKIM, and DMARC?

SPF (Sender Policy Framework)

SPF is an email authentication method that specifies which mail servers are authorized to send email on behalf of your domain. It helps prevent email spoofing by allowing receiving mail servers to verify that incoming mail from a domain comes from an IP address authorized by that domain's administrators.

DKIM (DomainKeys Identified Mail)

DKIM adds a digital signature to your emails that receiving mail servers can verify. This signature confirms that the email hasn't been altered in transit and that it genuinely comes from your domain. DKIM uses cryptographic authentication to ensure email integrity.

DMARC (Domain-based Message Authentication, Reporting, and Conformance)

DMARC builds on SPF and DKIM by adding reporting capabilities and instructing receiving mail servers what to do if authentication fails. It provides visibility into who is sending email on behalf of your domain and helps protect against phishing and spoofing attacks.

Why Are These Records Important?

• Improved Deliverability: Properly configured authentication records increase the likelihood that your emails reach recipients' inboxes
• Brand Protection: Prevent attackers from sending fraudulent emails that appear to come from your domain
• Compliance: Many organizations require proper email authentication for business communications
• Reputation Management: Maintain a good sender reputation with email providers
• Visibility: DMARC reports provide insights into email authentication failures and potential abuse

How to Fix Issues

If this tool identifies missing or invalid records, you'll need to add or update DNS TXT records for your domain. The exact process depends on your DNS provider (GoDaddy, Cloudflare, Google Domains, etc.). Most email service providers (Google Workspace, Microsoft 365, etc.) provide specific instructions for configuring these records with their services.

Security and Privacy

This tool performs standard DNS queries to check your domain's public DNS records. No private information is accessed or stored. All checks are performed in real-time and results are not saved. For more information, read our privacy policy .

Frequently Asked Questions

How do I check my domain's SPF record?

Enter your domain above and this tool will look up the SPF TXT record on your DNS, show you the raw value, and flag any syntax issues or missing mechanisms. You can also run the check directly by visiting a URL like emailshot.io/tools/dns-checker/yourdomain.com.

How do I check if DKIM is set up on my domain?

DKIM keys are published under a selector-specific subdomain, so a plain domain lookup won't find them. This checker tests the most common selectors (such as google, selector1, selector2, and default) automatically — if your provider uses a custom selector, check your email service's DKIM setup page for the exact selector name.

How do I check my domain's DMARC record?

This tool queries the _dmarc.yourdomain.com TXT record and shows the policy (none, quarantine, or reject) along with any reporting addresses configured. If you need to review the aggregate reports DMARC generates, use our DMARC report analyzer .

What does "no DMARC record found" mean?

It means your domain hasn't published a _dmarc TXT record, so receiving mail servers have no instructions for handling messages that fail SPF or DKIM checks. Without DMARC, spoofed emails claiming to be from your domain are more likely to reach inboxes.

How do I fix an SPF or DKIM record issue?

Add or update the relevant TXT record in your DNS provider's control panel (Cloudflare, GoDaddy, Google Domains, etc.). Common SPF fixes include removing duplicate v=spf1 records or adding a missing include: mechanism for your email service; DKIM issues are usually resolved by re-publishing the key your email provider gives you under the correct selector.