Free tool
Free SPF, DKIM & DMARC Checker
Enter your domain to check its SPF, DKIM and DMARC records live, with a clear pass / needs-work / fail verdict and the exact fix for each one. No signup - we read public DNS, nothing is stored.
How it works
SPF, DKIM and DMARC are the three DNS records that prove your email is really from you. When they are missing or misconfigured, mailbox providers like Gmail and Outlook are far more likely to send your mail to spam - or let someone spoof your domain. Since 2024, Gmail and Yahoo require SPF, DKIM and a DMARC record for anyone sending in volume.
This checker performs a live DNS lookup for your domain's SPF (a TXT record on the root domain), DMARC (a TXT record at _dmarc.yourdomain.com), and DKIM (TXT records at common selectors like default, google, selector1 and selector2). For each one it tells you whether it passes, what the record contains, and exactly what to change in plain English.
How to use it: enter the root domain you send mail from (for example yourcompany.com, not an email address), then read each card top to bottom. Fix the failures first - usually a missing DMARC record or an SPF that ends in +all - then re-run the check. DKIM selectors are not discoverable from DNS, so we probe the most common ones; a custom selector can still be valid even if it is not listed.
Getting authentication right is the foundation of deliverability, but content matters too. AutoEmail scores every AI-drafted reply for spam and risk before it is staged for your approval, so a clean domain and a clean message work together.