Email Tools

SPF, DKIM & DMARC Checker

Find out why your emails land in spam. Enter your domain to test the records inbox providers use to trust your mail.

Domains you check may be logged by Neu Notion to improve our services. Email addresses are never stored.

Emails still landing in spam?

We fix SPF, DKIM and DMARC, clean up every service that sends as your domain, and set up Google Workspace properly so your emails reach the inbox.

Get email delivery fixed

A free tool by Neu Notion. More free tools.

Related: DMARC Record Generator.

DNS lookups by Google Public DNS and Cloudflare DNS over HTTPS.

Checked domains and anonymous usage counts are sent to Neu Notion. Email addresses are never stored.

How this email checker works

The checker looks up your domain's public DNS records through encrypted DNS-over-HTTPS (Google Public DNS, with Cloudflare as a fallback), straight from your browser. It checks your MX records to see who hosts your email, then tests SPF, DKIM and DMARC, the three records inbox providers use to decide whether a message really comes from you.

SPF lists the servers allowed to send for your domain, and the checker also counts its DNS lookups against the limit of 10. DKIM adds a cryptographic signature; the checker tries the most common selectors or the one you enter. DMARC tells receivers what to do when SPF or DKIM fail and where to send reports.

Why are my emails going to spam?

Missing or broken SPF, DKIM or DMARC records are the most common technical cause. Since 2024, Gmail and Yahoo require all three for bulk senders, and many business mail servers now treat unauthenticated mail as suspicious.

What is a DKIM selector?

It's the label for a DKIM key in your DNS, published at selector._domainkey.yourdomain. Google Workspace uses google by default and Microsoft 365 uses selector1 and selector2. You'll find it as the s= value in an email's DKIM-Signature header.

Should my DMARC policy be none, quarantine or reject?

Start with p=none and a reporting address while you confirm every legitimate sender passes SPF or DKIM. Then move to quarantine, and finally reject, which gives the strongest protection against spoofing.

What is the SPF 10-lookup limit?

SPF allows at most 10 DNS lookups, counting include, a, mx, ptr, exists and redirect, including nested ones. Above that, SPF returns a permanent error and fails for every message.