Free tool / No signup

SPF, DKIM & DMARC Checker

Enter a domain and see its live email authentication records, read back in plain English. Most cold email that lands in spam fails here first: a missing DKIM key, an SPF record over the ten-lookup limit, or a DMARC policy set to none and never moved.

Common selectors: google (Google Workspace), selector1 (Microsoft 365), k1 (Mailchimp), s1 (SendGrid). If the lookup says not found, the key probably lives under a different selector.

Records are read live over public DNS-over-HTTPS (Cloudflare, falling back to Google). Nothing you type is stored or sent anywhere else. A not-found result can mean the record uses a different name or selector rather than that it is absent.

Want a straight answer on your outbound?

Book 30 minutes. We look at what you're running, I tell you what I'd check first, and you decide whether the audit is worth it.