Email Deliverability Checker: SPF, DKIM and DMARC for your domain
Check SPF, DKIM, DMARC and MX against the Gmail, Yahoo and Outlook.com sender rules.
- Free to use
- Nothing to install
- No sign-up
Want an expert to check this result?
Send it to us in one click. We read it and reply within one business day with what we would fix first.
About the Email Deliverability Checker
Enter the domain you send email from and see whether its DNS records meet the rules Gmail, Yahoo and Outlook.com set for senders. We read MX, SPF (counting DNS lookups through every include, against the limit of 10), DKIM keys at your selector or the common ones, and DMARC, then explain each problem and give you records to copy. Only public DNS is read: nothing is sent to your mail server.
How it works
-
Step 1
Enter your domain, or any email address on it. Add your DKIM selector if you know it.
-
Step 2
We read the domain's public DNS: MX, the SPF record and every include, DKIM keys and the DMARC record.
-
Step 3
Fix what is flagged with the suggested records, and check again once your DNS host shows the change.
The sender rules
Since February 2024 Gmail asks every sender for SPF or DKIM, and bulk senders (close to 5,000 or more messages a day to personal Gmail accounts) for SPF, DKIM, a DMARC record of at least p=none and one-click unsubscribe. Yahoo asks for much the same. Outlook.com asks senders of 5,000 or more messages a day for SPF, DKIM and DMARC.
SPF, DKIM and DMARC in short
SPF lists the servers allowed to send as your domain, in one TXT record of at most 10 DNS lookups. DKIM signs each message with a key published at a selector, such as google._domainkey. DMARC, at _dmarc, says what to do with mail that fails and where to send reports. The current DMARC standard, RFC 9989 from May 2026, replaces RFC 7489.
What this tool cannot do
It reads DNS only, so it cannot tell whether a given message passes: that depends on the server that sent it and the From address. It cannot see your spam rate, reverse DNS or unsubscribe headers, and it finds DKIM keys only at the selectors it tries. Send yourself a message and check its headers to confirm.
Frequently asked questions
What is an SPF record and do I need one?
SPF is a TXT record at the root of your domain that lists the servers and services allowed to send email as you, for example "v=spf1 include:_spf.google.com ~all" for Google Workspace. Gmail and Yahoo ask every sender for SPF or DKIM, and bulk senders for both, so most businesses need one. A domain must have exactly one SPF record.
What does "too many DNS lookups" mean for SPF?
SPF allows at most 10 terms that need a DNS lookup: include, a, mx, ptr, exists and redirect, counting the ones inside each include. Over 10, the check ends in an error and SPF fails for every message. Remove includes for services you no longer use, or move a newsletter tool to a subdomain with its own record.
Which DMARC policy should I start with?
Start with p=none and a rua address, so you receive reports without changing how your mail is treated. p=none meets the Gmail, Yahoo and Outlook.com rules for bulk senders. When the reports show every service that sends your real mail passing, move to p=quarantine, and later to p=reject, which asks receivers to refuse mail that fails.
How do I find my DKIM selector?
Open an email you sent, show the original message or its headers, and find the DKIM-Signature line: the selector is the value after s=. Google Workspace uses "google" by default, Microsoft 365 uses selector1 and selector2, and Zoho Mail lets you name your own. Enter the selector here to check its key.
Will this stop my emails going to spam?
It fixes one common cause: missing or broken authentication. Delivery also depends on your sending reputation and on spam complaints, which DNS cannot show. Gmail asks senders to keep the spam rate shown in Postmaster Tools below 0.10% and never to reach 0.30%, so watch it there once your records are in place.
Sources and checks
Rules last checked
The Email Deliverability Checker follows these official pages:
- Email sender guidelines (support.google.com)
- RFC 7208: Sender Policy Framework (SPF) for Authorizing Use of Domains in Email, Version 1 (rfc-editor.org)
- RFC 6376: DomainKeys Identified Mail (DKIM) Signatures (rfc-editor.org)
- RFC 9989: Domain-Based Message Authentication, Reporting, and Conformance (DMARC) (rfc-editor.org)
Yahoo's and Outlook.com's rules for senders come from Yahoo's Sender Hub and Microsoft's notice for high-volume senders.
Scores, limits and suggestions marked "our checklist", "our measure" or "our suggestion" are ours, not Google's or the platform's. How our tools work
Related reading
Rather have us do it for you?
Tell us about your business and what you want to fix. We reply within one business day.
Talk to us Our service: Technical SEO servicesMore free tools
All tools- Website SEO Audit Crawl up to 50 pages and get a health score, every issue and a 30-day plan.
- Redirect Checker Trace 301/302 redirects, chains and loops to the final URL.
- Robots.txt Tester Test a URL against robots.txt and see which rule blocks or allows it.
- AI Bot Log Analyzer See how AI crawlers crawl your site from your server access log.
Want us to fix what the tool found?
Tell us about your business and what you want to grow. We reply within one business day with next steps, not a sales script.
- A reply within one business day
- A quick look at your site and search visibility before we talk
- Your details are only used to answer your enquiry