Free Email Security Tool

Check Your Domain's
Email Security Records

Instantly look up SPF, DKIM & DMARC DNS records for any domain. Catch misconfigurations before they hurt your deliverability.

Free forever  ·  No account needed  ·  50+ DKIM selectors scanned

3
Records checked
50+
DKIM selectors
Live
DNS lookup
Free
Forever
SPF Record DKIM Record DMARC Record Live DNS Lookup Security Assessment

Results for

TXT

SPF

Sender Policy Framework
TXT

DMARC

Domain-based Message Authentication
TXT

DKIM

DomainKeys Identified Mail
Free · Early Access

Stop checking your DNS by hand. We'll watch it for you.

A silent SPF or DKIM change can quietly send your emails to spam for weeks before anyone notices. Drop your email and we'll alert you the moment something looks off, so you fix it in minutes, not after a deliverability cliff.

Continuous DNS checks
SPF, DKIM, DMARC, MX, NS and major DNSBLs - re-checked automatically.
Email alerts on changes
A clear email the day a record is added, removed or modified - no dashboards to babysit.
Plain-English fixes
Every alert tells you what changed, why it matters, and the exact record to set to fix it.
Free forever · One-click unsubscribe in every email · No credit card, no spam

Want better email deliverability?

Mailsoftly handles SPF, DKIM & DMARC automatically. Campaigns, automation, and analytics in one place.

Free to start with your Google Workspace account. No credit card required.

This free SPF, DKIM, and DMARC checker looks up all three email authentication records for any domain and shows which ones pass and which fail. SPF passes when a single DNS TXT record starts with v=spf1 and lists every server allowed to send your mail. DKIM passes when the public key published at selector._domainkey matches the signature on your messages. DMARC passes when a TXT record at _dmarc.yourdomain starts with v=DMARC1 and sets a policy of none, quarantine, or reject. If any of the three fails, mailbox providers like Gmail and Outlook are more likely to send your email to spam or reject it outright.

Frequently Asked Questions

What does it mean if my DMARC record fails?

A failing DMARC check usually means one of three things: there is no TXT record at _dmarc.yourdomain, the record does not start with v=DMARC1, or SPF and DKIM do not align with your sending domain. Until DMARC passes with a policy of quarantine or reject, attackers can spoof your domain and providers may filter your legitimate mail. Add or fix the _dmarc TXT record, start with a policy of none to monitor, then move to quarantine or reject once SPF and DKIM pass.