FREE TOOL

Why are my emails going to spam? SPF, DKIM and DMARC check

Type a domain or an email address. In a few seconds you see whether SPF, DKIM and DMARC are in place, what is wrong, and the exact record that fixes it.

From an email address we use only the part after the @.

Add a DKIM selector (optional)

If your mail provider gave you a selector, type it here and we check that one too.

We only read the domain's public DNS records, which every mail server in the world can see. We do not connect to your mail or send anything. From an e-mail address we use only the part after the @. Nothing you type is kept; the result stays for 10 minutes.

Result

Mail (MX)

The domain's MX records

—
SPF

The v=spf1 TXT record and the DNS lookups it needs

—
DKIM

A key under the 18 most common selectors, or yours

—
DMARC

The TXT record at _dmarc

—
Encryption in transit

MTA-STS and TLS-RPT (optional)

—
BIMI

A logo beside your messages (optional)

—

What this means

We check the DNS records. Whether a given message lands in spam also depends on its content, the sending server's reputation and the list; none of that is visible from outside.

Records that fix it

Copy the record into the domain's DNS settings, at your registrar or hosting company.

WANT A HAND

Send us the result

Replace your text with the result?

ENQUIRY RECEIVED

We have it. We reply within two working days.

A copy is on its way to your inbox. If it does not arrive, check the spam folder — and write to us directly. [email protected]

Reference number:

Which layer hurts?

Pick the service you need — the small mark beside it is our name for that layer in the story.

The text below comes from your result. Read it, change it or delete any of it. Nothing is sent until you press Send.

A brief, a screenshot or a sketch. Up to 8 MB.

Picked: Care & security

We use what you write only to answer you. See the privacy policy.

What we check

We read the domain's public DNS records through the public resolvers of Cloudflare and Google: MX, SPF with every include and the DNS lookups they need, the DKIM key under the 18 most common selectors or yours, DMARC on the domain or its parent domain, MTA-STS, TLS-RPT and BIMI. We do not connect to your mail server or send any message.

Since February 2024 Gmail and Yahoo, and since 5 May 2025 Outlook, require SPF, DKIM and DMARC from anyone sending more than 5,000 messages a day. Smaller senders are filtered on the same records.

We only look at what the site shows every visitor and at the domain's public records. We do not try passwords, forms or hidden addresses.

We set up and watch these mail records as part of website maintenance.

What a DMARC record is

QUESTIONS

What people ask

What are SPF, DKIM and DMARC, in plain words?

SPF is the list of servers allowed to send mail for your domain. DKIM is a signature that shows the message was not changed on the way. DMARC tells the receiver what to do with a message that fails both checks, and where to send you reports.

Why do my emails go to spam when the records are fine?

The records only get you through the door. Filters also weigh the reputation of the server and the domain, the content and links, how many recipients mark the message as spam, and how clean your list is. Send us an example of a message that went to spam and we will look for the cause.

What does "no DKIM found" mean?

We check the 18 selectors providers use most. Many providers use names of their own, so "not found" does not mean there is no key. Ask your mail provider for the selector, or find it in the headers of a message you sent (the DKIM-Signature line, after s=), and enter it in the field.

Which DMARC record should I start with?

v=DMARC1; p=none; rua=mailto: followed by an address you read. It only monitors: it stops no message, but it sends you reports on who sends in your domain's name. After two to four weeks, when the reports show all your mail passes, move to p=quarantine and later to p=reject.

Does Gmail require DMARC?

Yes, from anyone sending more than 5,000 messages a day: since February 2024 Gmail and Yahoo, and since 5 May 2025 Outlook, require SPF, DKIM and DMARC, and p=none is enough for DMARC. Smaller senders are filtered on the same records, so we recommend them for every domain you send mail from.

Do you send a test email?

No. We only read the domain's public DNS records, which every mail server can see. We do not connect to your mail server, send messages or check whether mailboxes exist.

All tools
on our server

Who hosts this website

Which registrar holds the domain, where the site is hosted and who runs the mail.

Who hosts this website
on our server

SSL certificate check

When the certificate expires, who issued it and whether the chain is complete, with a reminder for your calendar.

SSL certificate check