Email DNS Checker

Check a domain’s email set-up: MX, SPF, DKIM and DMARC records, plus MTA-STS and TLS reporting. Find out why mail goes to spam, or whether your domain can be spoofed.

Runs in your browser. Files are not uploaded.

How to use

  1. Enter a domain, or any email address on it.
  2. Select Check.
  3. Read each result. Anything marked Problem should be fixed first.

Questions

What do SPF, DKIM and DMARC do?

SPF lists the servers allowed to send your email. DKIM signs each message so receivers can check it wasn’t changed. DMARC tells receivers what to do when a message fails, and sends you reports.

Why wasn’t my DKIM key found?

DKIM keys live under a name called a selector, which varies by email provider. We try the common ones. To find yours, open an email you sent, view its headers, and look for s= in the DKIM-Signature line.

What gets sent where?

The domain names being checked are looked up with Cloudflare’s public DNS service over HTTPS, or Google’s if Cloudflare can’t be reached. Nothing else is sent.

What is the SPF lookup limit?

SPF allows 10 DNS lookups, counting every include, a, mx and redirect, including those inside other includes. Past 10, receivers treat SPF as failed.

More marketing tools