Email setup checker
Is your mail landing in spam and you don't know where to start? Enter your domain and we'll check all four — SPF, DKIM, DMARC and MX — and give you one report.
No signup, no email required. Only public DNS records are read.
Four records, four different jobs
Email infrastructure isn't a single setting: four separate DNS records do four separate jobs, and while one is missing the others can't provide full protection.
MX tells senders which server should receive mail for you — it only concerns RECEIVING. SPF declares which servers may send on your behalf. DKIM attaches a cryptographic signature to every message you send. DMARC ties the SPF and DKIM results to a policy: it says what to do with mail that fails, and sends you reports.
In what order should you fix them?
Order matters, because DMARC builds on the other two. Tightening DMARC before SPF and DKIM work correctly does nothing but block your own mail.
MX first: if you can't receive mail, nothing else matters. Then SPF — especially the 10 DNS lookup limit, because past it a valid-looking record stops working entirely. Then confirm your DKIM signature is really published. Publish DMARC last, starting at p=none and moving gradually to p=reject.
How is the score calculated?
Each area is scored out of 100 on its own; the overall score is their weighted average. SPF and DMARC carry more weight (30% each), DKIM and MX less (20% each).
When DKIM can't be detected it's excluded from the average entirely. The reason: DKIM selector names can't be enumerated over DNS, so penalising a flawless setup that uses a custom selector would be wrong. What we don't know doesn't lower your score.
By the same principle, any standards-compliant setup scores full marks. The tool doesn't say 'you could do better'; it only points at actual standards violations or concrete risks.
Frequently asked questions
How do I know whether my email setup is correct?
Enter your domain in the tool on this page; SPF, DKIM, DMARC and MX are checked at once, each gets its own grade, and you get an overall score on top. Click any card to open the detailed analysis for that area.
Why does my mail land in spam?
The most common cause is missing authentication: no SPF record or one invalidated by exceeding the 10-lookup limit, no DKIM signature, and no DMARC record. Fixing those three resolves the large majority of cases.
Can I send mail without these records?
You can, but your mail is noticeably more likely to land in spam. Large providers such as Gmail and Outlook now expect these records, especially from domains that send in bulk.
My records look right but mail still doesn't arrive
Correct DNS records don't guarantee that the mail you actually send passes authentication. Your SPF record may be flawless while your mail leaves from a server that isn't listed in it. Use the inbox test to measure that: you send a real message and we measure the real result.
Is this tool free? Do I need an account?
It's completely free and requires no account or email address. It only reads public DNS records.