If your sign-up or launch emails land in spam, the cause is usually email authentication. Enter your domain to check MX, SPF, DMARC and common DKIM selectors in one go.
How to use the SPF, DKIM & DMARC checker
- Enter your sending domain.
- Review MX, SPF, DKIM and DMARC results.
- Add or fix the DNS records your email provider gives you.
What each record does
SPF lists the servers allowed to send for your domain. DKIM signs each message so receivers can verify it wasn't changed. DMARC tells receivers what to do when SPF or DKIM fail, and where to send reports.
Since 2024 it is required
Gmail and Yahoo require SPF, DKIM and a DMARC record for bulk senders. Start DMARC at p=none to collect reports, then move to quarantine once everything passes.
Reading the score
Six checks each count equally: MX records exist, there is exactly one SPF record, the SPF record ends in ~all or -all rather than +all, a DMARC record exists, the DMARC policy is quarantine or reject, and DKIM was found on a common selector. 80 or more is well set up, 50–79 is partial, and under 50 means mail is likely to be flagged. p=none doesn't pass the policy check because it only monitors; it is the right first step, but not the end state. If there is no DMARC record, a starter record is shown ready to copy.
Fixing the common failures
Two SPF records: merge them into one, such as v=spf1 include:_spf.google.com include:sendgrid.net ~all. Too many includes: SPF allows at most 10 DNS lookups, so remove services you no longer use. DKIM not found: copy the exact selector and record from your email provider's domain settings; it is often something like s1._domainkey. DMARC missing: add the starter record at _dmarc, read the reports for a couple of weeks, then switch to p=quarantine. Check each sending service (newsletter, transactional, helpdesk) is covered.