Will your email land in the inbox?
Type a domain and we’ll read its public MX, SPF, DKIM and DMARC records, then tell you in plain words what’s set up, what’s missing and what to change. Free, no sign-up, and we don’t keep what you type.
Nothing checked yet
Enter a domain above. We’ll look up its mail servers, SPF, DKIM and DMARC records in a few seconds.
What this checks
- Which servers receive mail for the domain, and which provider runs them.
- That there’s exactly one SPF record, within the limit of 10 DNS lookups.
- DKIM keys at your selector or the common ones, with their type and length.
- The DMARC policy, where reports go and whether outside report addresses are allowed.
MX lookup
MX records tell other mail servers where to deliver mail for your domain. Each has a priority: the lowest number is tried first. A domain with no MX records can’t receive email.
SPF record check
SPF is one TXT record that lists who may send mail for your domain. It must be the only one, and it may trigger at most 10 DNS lookups through include, a, mx, ptr, exists and redirect. Past that, inboxes treat it as broken.
DKIM checker
DKIM signs each message with a private key; the public half lives in DNS at a selector, such as google._domainkey. Your mail provider tells you the selector. 2048-bit keys are the norm today.
DMARC checker
DMARC tells inboxes what to do with mail that fails SPF and DKIM: none (just report), quarantine (spam) or reject. Since 2024 Gmail and Yahoo expect bulk senders to publish one. Start with none, read the reports, then tighten it.
What we keep
Only a daily count of how many checks ran and how they ended. Not the domain you typed, not your address, no cookies. The domain travels in the form, never in the web address.
Questions people ask
Do I need SPF, DKIM and DMARC?
If you send email from your domain, yes. Gmail and Yahoo ask every sender for SPF or DKIM, and bulk senders for all three. Without them your mail is more likely to land in spam.
Why does the DKIM check say it found nothing?
DKIM keys live under a selector name that only your provider knows. We try the common ones; if yours is different, add it under the domain field. Your provider’s DKIM settings page shows it.
What is the SPF 10-lookup limit?
Each include, a, mx, ptr, exists or redirect in SPF costs a DNS lookup, and includes can contain more. Inboxes stop at 10 and fail the check, so long lists of services can break SPF without you noticing.
Is p=none enough?
It’s the right place to start: you get reports without risking real mail. It doesn’t stop fakes, though. Once the reports show only your own services, move to quarantine, then reject.