~10 secTracking checker
Is every pixel firing?
Free tool · Email deliverability
Do your emails reach the inbox?
Since February 2024, Gmail and Yahoo require SPF, DKIM and DMARC from anyone sending 5,000 or more emails a day to their users. Enter your domain to see which records you have, what each one does and the record to add if one is missing.
Free, no sign-upUnder 5 secondsPublic DNS only
Leave selectors blank and we try the common ones: Google Workspace, Microsoft 365, Mailchimp, Klaviyo and SendGrid.
Also free:Tracking checkerROAS calculatorSEO checkerWebsite speed testSecurity scan
Sample reportyourstore.com
- SPF6 of 10 lookupsPass
- DKIMgoogle, klPass
- DMARCp=noneWarn
- MXGoogle WorkspacePass
- BIMIOptionalInfo
In short
How do I check SPF, DKIM and DMARC for my domain?
Enter your domain in the email deliverability check. In under 5 seconds it reads your public DNS records and shows whether SPF, DKIM, DMARC, MX and BIMI are set, counts SPF’s 10-lookup limit, checks them against the Gmail and Yahoo sender rules, and gives you a starter record to paste for anything missing.
- You enter
- Your domain
- Results in
- ~5 sec
- Price
- Free, no sign-up
- Highlights
- SPF, DKIM, DMARC, MX and BIMI · Counts SPF’s 10-lookup limit · Starter records to paste
01 — What it checks
The records every inbox reads.08
Before an inbox shows your campaign, it looks up three records on your domain. Here’s each one, and the details that break them.
SPF
Which servers may send as you. One record only, with an ending that tells inboxes what to do with the rest.
SPF lookup limit
Every include: costs DNS lookups; past 10, SPF fails. We follow the includes and count.
DKIM
The signature that proves an email wasn’t changed. We look up the selectors you enter, or the common ones.
DKIM key size
1024-bit keys still pass, but 2048-bit is today’s standard. We size every key we find.
DMARC policy
What inboxes do with mail that fails: nothing, spam folder or reject. p=none only monitors.
DMARC reports
A rua= address, so you see every service that sends as you, and when one starts failing.
Mail servers
MX records, so replies to your campaigns don’t bounce, and which provider handles them.
BIMI
The optional record that shows your logo next to your emails, once DMARC is enforced.
02 — How it works
Three lookups, one answer.
We ask public DNS
Over encrypted DNS (Cloudflare’s resolver, with Google’s as backup), for the same records every inbox reads.
We read each record
SPF includes are followed and counted, DKIM keys are sized, and the DMARC policy and reports are read tag by tag.
You get the record to add
Each check gets pass, warn or fail, and a missing record comes with a starter version to paste into your DNS.
What a record check can’t see
Whether mail lands in the inbox or spam, your sender reputation, list hygiene and how your campaigns are built. A deliverability audit tests those with real sends.
03 — Free check or deliverability audit
Records get you to the door. Reputation gets you in.
What it reads
- Free check
- Public DNS records
- Deliverability audit
- Klaviyo, Shopify Email and your sending history
Inbox placement
- Free check
- Not tested
- Deliverability audit
- Seed tests across Gmail, Outlook and Yahoo
Reputation
- Free check
- Not visible
- Deliverability audit
- Google Postmaster Tools, bounces and complaints
What you get
- Free check
- Pass, warn or fail per record
- Deliverability audit
- A warm-up and list plan, ranked by revenue
Time
- Free check
- Under 5 seconds
- Deliverability audit
- [5] working days
| What | Free check | Deliverability audit |
|---|---|---|
| What it reads | Public DNS records | Klaviyo, Shopify Email and your sending history |
| Inbox placement | Not tested | Seed tests across Gmail, Outlook and Yahoo |
| Reputation | Not visible | Google Postmaster Tools, bounces and complaints |
| What you get | Pass, warn or fail per record | A warm-up and list plan, ranked by revenue |
| Time | Under 5 seconds | [5] working days |
Not sure you need an audit? Bring the free report to a call and we’ll tell you straight.
Book a strategy call
04 — More free tools
Check the rest of the store.
Each tool reads one thing and tells you the fix. Run them in any order.
- ~10 sec
InstantROAS calculator
What ROAS do you need?
~5 secSEO checker
Can Google read your store?
~5 secWebsite speed test
How fast does your store answer?
~10 secSecurity scan
Is your store leaking anything?
FAQ
Questions about email records.
Not on the list? Ask on a call, or by email.
The name a sending service gives its DKIM key, like “google” for Google Workspace or “k1” for Mailchimp. You’ll find it in the domain settings of each tool that sends as you. Enter several, separated by commas.
Yes, if you send campaigns. SPF and DKIM prove mail is yours; DMARC tells inboxes what to do when it isn’t. Gmail and Yahoo require all three from bulk senders.
It meets the Gmail and Yahoo rules and it’s the right way to start, but it doesn’t stop anyone sending as you. Read the reports for a few weeks, then move to p=quarantine.
Every include: costs at least one DNS lookup and the limit is 10, so each new tool that sends as you adds to the count. Remove the services you no longer use.
For the best placement, set up a branded sending domain in Klaviyo. It gives you the DNS records to add, and the DKIM selector to check here.
Still unsure?Saimul Islam reads every report people bring to a call.Records in place?
Let’s send more.
Book a strategy call
Email should be your cheapest channel. Bring this report to a [30]-minute call.
Or write to [hello@domain.com]
