Free SPF, DKIM, and DMARC checker
Enter a domain. The checker looks up the public DNS records and tells you what to fix. No login.
Check a domain in three steps
- 01
Enter the sending domain
Type the domain you send from, such as example.com. Do not include https:// or a mailbox.
- 02
Add a DKIM selector if you know it
Leave the selector blank to try common names such as google, selector1, and s1. Enter one if your provider uses a custom selector.
- 03
Read pass, warn, or fail
Each of SPF, DKIM, and DMARC gets its own result, the DNS record that was found, and a plain-English fix when something is missing or too loose.
Frequently asked questions
What does this checker look up?
It reads public DNS TXT records: SPF on the domain, DKIM at selector._domainkey, and DMARC at _dmarc. It does not send a test email or sign in to a mailbox.
Which DKIM selector should I enter?
Use the selector from your email provider, such as google or selector1. If you leave it blank, the checker tries common selectors automatically.
What is the difference between pass, warn, and fail?
Pass means the record is present and enforcing, such as SPF -all or DMARC p=reject. Warn means it is present but loose, such as SPF ~all or DMARC p=none. Fail means it is missing, duplicated, or too open, such as SPF +all.
Do you store the domain I check?
No account is required and the domain is not saved to a database. It may appear in server logs. The page is rate-limited so it cannot be used as an open DNS proxy.
Put a passing domain to work with OutreachBox
Once SPF, DKIM, and DMARC are in place, agents can warm inboxes, verify addresses, and send with approval gates. Free plan; paid from $99/month.
- Free plan available
- No credit card required
- Approval gates you control