Free domain tool

SPF & DMARC checker

Inspect the email authentication records published by any domain.

Authentication records

What this checks

SPF tells receiving servers which systems are allowed to send mail for a domain. DMARC tells receivers how to handle messages that fail authentication and can also define reporting behavior.

This tool reports whether records are present and shows the published TXT values. It does not score policy quality or guarantee deliverability.

More email DNS diagnostics

Use the SPF record checker or DMARC record checker for focused lookups, the DKIM record checker when you know a selector, or run the combined email DNS health checker for MX, SPF and DMARC in one report.

Put the result to work

Separate published policies from message authentication

This tool reads the domain’s SPF and DMARC records and flags basic published-record issues. A policy being present does not mean that a particular email passed authentication.

  1. Look up your sending domain

    Enter the domain whose policies you want to inspect.

  2. Review SPF and DMARC separately

    SPF describes sending authorisation; DMARC connects authentication with the visible From domain.

  3. Check a received message

    Use actual message headers to inspect the outcome reported by a receiving server.

Worked examples

What the evidence tells you

Illustrative scenarios, not live results for the addresses or records shown. Open a scenario to see the next action.

01SPF found; DMARC absent
Only part of the setup is visible

The published SPF policy does not replace a DMARC policy.

Next action Review the sender’s setup instructions.

02DMARC p=none
Monitoring policy

The policy does not request quarantine or rejection merely because of a DMARC failure.

Next action Review reports before tightening policy.

03Records found without listed issues
Publication check passed

The basic lookup did not flag its supported checks. It did not authenticate a message.

Next action Inspect real message headers.

Use it with a purpose

Where this tool fits

Adding a sending service

Compare the service’s required DNS entries with what is currently published.

Troubleshooting spam placement

Rule out obvious record problems, then examine real authentication outcomes and sender reputation.

Before you decide

Questions about this tool

Does this check DKIM too?

Use the separate DKIM lookup with the selector from your provider or a message signature.

Does it evaluate every SPF include?

No. It performs basic record analysis, not recursive sender-IP evaluation.

Can I copy a generic policy into DNS?

Use your mail provider’s exact records. A policy copied from another setup may block legitimate mail.