SPF, DKIM & DMARC checker

The three DNS records that decide whether your email reaches the inbox. Check any domain — free, instant, no signup.

Records missing? Outreach Studio walks you through fixing them

Then sends your outreach at a safe pace with warm-up, caps, and send windows built in.

What are SPF, DKIM, and DMARC?

SPF lists which servers may send email for your domain. DKIMcryptographically signs each message so receivers can verify it wasn't forged. DMARC tells receivers what to do when a message fails those checks. Gmail and Outlook treat mail from domains without them as suspicious — often sending it straight to spam, no matter how good the content is.

How to fix a failing check

SPF:add a TXT record on your root domain. Your email host's docs give the exact value — it looks like v=spf1 a mx include:… ~all.
DKIM: enable signing in your email panel (cPanel: Email Deliverability; Google Workspace: Admin → Gmail → Authenticate), then publish the key it gives you as a TXT record.
DMARC: add a TXT record on _dmarc.yourdomain.com starting with v=DMARC1; p=none; — tighten the policy once your own mail passes.
Records can take 15–60 minutes to propagate — re-check after saving.
Want the full picture — warm-up schedules, volume rules, monitoring? Read the complete deliverability guide.

Authentication is half the battle

Perfect DNS won't save spammy content, and great content won't save an unauthenticated domain. Run your email copy through our free spam checker too — then send at a human pace with daily caps and warm-up, which is exactly what Outreach Studio automates.