Enter the sending domain
Use the domain after the @ sign in an email address, or paste an email address and the checker will extract it.
Email DNS health check
Email Domain Configuration Checker
Check whether a domain publishes the DNS records needed to receive email and authenticate outgoing messages.
MXMail routingSPFSender policyDKIMMessage signingDMARCEnforcement
This is a read-only DNS check. DKIM requires the selector supplied by your email provider; leave it blank to check MX, SPF and DMARC only.
Email configuration reportMX · SPF · DKIM · DMARC
How it works
Check email DNS in three steps
Add a DKIM selector if known
Your email provider names the selector. Common examples include google, default, selector1 and selector2.
Review each policy
See the live DNS values, pass or warning status, and a focused recommendation for missing or conflicting records.
Email authentication
What the checker looks for
MX receives mail
MX records route incoming messages to your mail provider. A lower preference value is tried first.
SPF authorizes senders
SPF lists the servers and services allowed to send mail for the domain. A domain should publish exactly one SPF policy.
DKIM signs messages
DKIM publishes a public key under a provider-specific selector so recipients can verify a message signature.
DMARC sets enforcement
DMARC tells receivers what to do when SPF or DKIM alignment fails and can direct aggregate reports to the domain owner.
Email DNS questions
Email domain configuration FAQ
Explore web & network tools →View all DevsLoad tools →What records does the email domain checker test?
It checks MX records at the domain, an SPF TXT policy, a DMARC TXT policy at _dmarc, and a DKIM TXT key when you provide a selector.
Why is a DKIM selector required?
DKIM keys are not published at one universal name. Each provider chooses a selector, which appears before ._domainkey in the DNS record name.
Can a domain have more than one SPF record?
No. A domain should publish one SPF record that includes every authorized sender. Multiple SPF records cause SPF evaluation to return a permanent error.
Is a DMARC p=none policy secure?
It enables monitoring but does not ask receivers to quarantine or reject failing mail. Move toward quarantine or reject after reviewing reports and authenticating all legitimate senders.
Does a passing result guarantee email delivery?
No. DNS authentication is important, but delivery also depends on alignment, message signing, IP and domain reputation, content, recipient rules and provider configuration.
Does this tool change my DNS?
No. It only reads public DNS records. Make changes in the DNS dashboard for your domain and follow the values supplied by your email provider.