Email deliverability checker

Almost always missing authentication: SPF, DKIM and DMARC are DNS records that prove your email really comes from you. Since February 2024, Gmail and Yahoo enforce these requirements — unauthenticated senders get filtered or rejected regardless of how legitimate the message is. This tool shows exactly which records you're missing.

SPF is a public list of servers allowed to send email for your domain. DKIM is a cryptographic signature that proves the message wasn't altered. DMARC ties them together and tells receivers what to do when a message fails — and where to send reports. All three are DNS TXT records; none require changing your email provider.

Each fix is a DNS record at your domain registrar. Your email provider (Google Workspace, Microsoft 365, etc.) publishes the exact SPF include and DKIM key to copy in. DMARC starts as one line: v=DMARC1; p=none; then tighten to quarantine or reject. Or have us do it — DNS and email setup is one of our services, usually a same-day fix.

We probe the most common DKIM selectors (google, default, selector1/2 and others), but providers can use custom selector names we can't guess. If your provider confirms DKIM is enabled and aligned, trust their test. If you never configured DKIM at all, the warning stands.