DMARC / SPF Checker

Check a domain's SPF, DMARC, and DKIM email authentication records in one pass. These records control which mail servers are allowed to send email for a domain and how receivers should handle failures.

Domain

DKIM Selector

How was this tool?

Your feedback helps us improve DMARC / SPF Checker.

Why use DMARC / SPF Checker?

SPF, DMARC, and DKIM are DNS TXT records that work together to authenticate outbound email for a domain — SPF lists authorized sending servers, DKIM cryptographically signs messages, and DMARC tells receiving servers what to do when a message fails those checks. This tool looks up all three at once using the same DNS infrastructure as the DNS Lookup tool.

Key benefits

Checks all three email authentication records in one lookup
Shows the raw record text for each
Uses the same DNS infrastructure as the DNS Lookup tool

Features

SPF record lookup at the domain root
DMARC record lookup at _dmarc.<domain>
DKIM record lookup at a custom selector

Popular use cases

Verifying email authentication is set up correctly for a domain
Diagnosing why outbound email is landing in spam
Checking a domain's configuration before a mail migration

How to use DMARC / SPF Checker

1
Enter a domain
Type the domain you want to check.
2
Enter a DKIM selector (optional)
DKIM records are published under a selector — enter it if you know it, or leave the default.
3
Check records
Click Check Records to look up SPF, DMARC, and DKIM at once.

Frequently asked questions

What is a DKIM selector?

DKIM records are published at a subdomain like "selector._domainkey.example.com" — the selector is chosen by whoever configured DKIM, so you need to know it (check your email provider's DKIM setup instructions) to look up the record.

Why does my domain show no DMARC record?

DMARC is opt-in — if a domain hasn't published a policy at _dmarc.<domain>, no record will be found, which means the domain has no DMARC policy in place.

Does finding a record mean email authentication is fully configured correctly?

It confirms the record exists and its content, but reviewing whether the policy is correctly scoped (e.g. DMARC policy strictness, SPF include lists) requires reading the record content itself.

Last reviewed: July 2026

How was this tool?

Related tools