Email DNS Checker

What the email DNS checker does

Every message you send is judged by the receiving server before anyone reads it. That server looks up your domain's DNS and asks four questions. Do MX records exist, so the domain can receive replies and bounces? Does an SPF record list which servers may send on the domain's behalf, and how strictly should unlisted senders be treated? Is there a DKIM public key so the signature on the message can be verified? And does a DMARC policy tell the receiver what to do when SPF or DKIM fail, and where to send reports? This tool performs those lookups live, analyzes the results, and rolls them into a single grade from A to F.

How to use it

• Enter your domain, for example example.com, without www or https.
• Optionally enter your DKIM selector. If you leave it blank, the tool tries common selectors such as default, google, selector1 and selector2, plus selectors matched to your detected mail provider.
• Read the grade, then work through the findings. Errors come first, followed by improvements.
• Copy the example records directly into your DNS provider's control panel and check again after propagation.

For SPF the tool reports the "all" qualifier and estimates how many DNS lookups the record consumes, because more than ten causes SPF to fail outright. For DMARC it shows the policy, whether aggregate reports are configured, and how to move safely from monitoring to enforcement.

Why it matters

Major mailbox providers now require SPF and DKIM for anyone sending in volume, and a DMARC record for every sending domain. Without them, legitimate newsletters, invoices and password resets land in spam or are rejected silently. Just as important, a domain without an enforcing DMARC policy can be spoofed by anyone, which is how most invoice fraud and phishing campaigns begin. A correct setup takes three DNS records and about twenty minutes, yet a large share of business domains still fail at least one check.

If you would rather not manage this yourself, our business email hosting comes with SPF, DKIM and DMARC configured on every domain we host, and we monitor the records so a DNS change never quietly breaks your deliverability. You can also confirm the underlying records with the DNS lookup tool or review ownership details with the WHOIS lookup.