SPF, DKIM & DMARC Checker

Look up a domain's SPF, DKIM, and DMARC records in one pass — see exactly what's published in DNS right now.

100% Free Live DNS Lookup Instant Results

Check Email Authentication Records

Don't know your DKIM selector? Leave it blank — we'll try the most common ones (default, google, selector1, selector2, k1, mail, and more).

Secure by designYour domain is processed instantly over an encrypted connection and never stored on our servers.

Encrypted in transitSubmitted over HTTPS/TLS — nothing is sent in plain text.

Never storedThe domain you check and its records are not saved to any database or log.

No third-party sharingYour data is never shared with ads, trackers, or outside services.

Processed instantlyChecked on request and discarded immediately after the response.

About SPF, DKIM & DMARC Checker

What Is an SPF, DKIM & DMARC Checker?

This tool checks all three major email authentication records for a domain in one pass — SPF, DKIM, and DMARC — giving you a complete picture of whether your domain's outgoing email is properly authenticated and protected against spoofing.

How to Use This Tool

Enter your domain
Click Check
Review the status of your SPF, DKIM, and DMARC records
Fix any missing or misconfigured records through your DNS provider

Key Features

All three protocols checked together — a complete authentication snapshot
Clear pass/fail per record — know exactly what's missing

Who Uses This Tool

Email administrators and IT teams auditing domain email security. Businesses verifying setup after migrating email providers.

Frequently Asked Questions

Do I need all three records?
Yes, ideally — SPF and DKIM authenticate the message, while DMARC tells receiving servers what to do when authentication fails, and also provides reporting visibility.

Is this tool free?
Yes, checking SPF, DKIM, and DMARC is completely free.

Frequently Asked Questions

Why can't you find my DKIM record automatically?

DKIM records live at a selector-specific subdomain (selector._domainkey.yourdomain.com) that isn't listed anywhere discoverable in DNS — you have to know the selector your mail provider uses. We try common defaults, but if yours is custom, check your email provider's DKIM setup page for the exact selector.

What does "multiple SPF records" mean, and why is it bad?

A domain must have exactly one SPF record. Having two or more is explicitly invalid per the SPF specification and typically causes every SPF check against your domain to fail (a "permerror"), even for legitimate senders.

My DMARC record exists but says p=none — is that a problem?

Not necessarily — p=none is a valid, common starting point that only enables reporting without affecting delivery. It just means you haven't turned on enforcement yet. Review your aggregate reports, then move to quarantine or reject when ready.

All three records are missing — where do I start?

Start with SPF and DKIM since DMARC depends on at least one of them being set up. Use our SPF Generator and DKIM Generator first, then add a DMARC record with our DMARC Generator once those are live.

Does this tool send any email?

No — this is a pure DNS lookup tool. It reads what's already published in your domain's DNS; it doesn't send, receive, or interact with any email at all.

How fresh are these results?

Every check queries DNS live at the moment you click "Check Records" — there's no caching, so results reflect whatever is currently published, though DNS changes can take time to propagate globally.