SPF, DKIM & DMARC Checker
Check any domain's email authentication setup instantly — missing or misconfigured records are one of the most common reasons legitimate email lands in spam, and let attackers spoof your domain.
Why Email Authentication Matters
SPF, DKIM, and DMARC together let receiving mail servers verify that an email claiming to be from your domain actually is. Without them, attackers can send phishing emails that appear to come from your company — a common tactic in business email compromise scams — and Gmail/Outlook increasingly send unauthenticated mail from your own domain straight to spam.
As of 2024, Google and Yahoo require SPF, DKIM, and DMARC for any domain sending more than ~5,000 emails/day to their users, and apply stricter spam filtering to unauthenticated mail from smaller senders too.
Fixing What This Tool Finds
Add missing records through your DNS provider (the same place you manage your domain). Start DMARC at p=none to monitor without blocking anything, review the aggregate reports for a few weeks, then move to p=quarantine and eventually p=rejectonce you're confident all legitimate senders are covered.