MX: where your mail is delivered
MX records tell other mail servers which server receives mail for your domain. Without them nobody can send you email. If you move to a new provider, the MX records are the switch that moves your incoming mail.
FREE TOOLMX · SPF · DKIM · DMARC
Email DNS checker
Is your email set up right? Enter your domain to check its MX, SPF, DKIM and DMARC records in one go, and see in plain words what to fix so your mail lands in the inbox, not in spam.
Results for
Results come from public DNS and can take up to a few hours to change after you edit a record.
Guide
What the four records do
Every business domain that sends email needs these. Together they prove your mail is genuine.
SPF: who may send for you
One TXT record that starts with v=spf1 lists the services allowed to send mail as your domain, for example your mail provider and your invoicing tool. It must be a single record, end with ~all or -all, and stay within 10 DNS lookups.
DKIM: a signature on every message
Your mail server signs each message with a private key, and publishes the public key in DNS under a selector. Receivers check the signature to confirm the message came from you and was not changed. Use a 2048-bit key.
DMARC: what to do with fakes
A TXT record at _dmarc.yourdomain.com tells receivers what to do with mail that fails SPF and DKIM: nothing (p=none), send it to spam (quarantine) or refuse it (reject). Gmail and Yahoo expect it from anyone who sends a lot of mail.
Fixing problems
Common mistakes and how to fix them
Two SPF records
Merge them into one v=spf1 record that includes every service, then delete the other.
Too many SPF lookups
Remove services you no longer use. Each include: costs at least one of the 10 lookups allowed.
No DKIM key
Turn on DKIM in your mail provider and add the TXT record it gives you, exactly as shown.
DMARC stuck on p=none
Read the reports for a few weeks, fix any service that fails, then move to quarantine and reject.
MX still at the old provider
After you move, update the MX records, or mail keeps arriving at your old service.
Records added at the wrong place
Add records where your domain's DNS is hosted (often the registrar, or Cloudflare), not where the website is hosted.
On Daakiaa you never type these by hand: we show the exact records for your domain and can add them for you on popular DNS providers. Get free business email.
Questions
Email DNS checker: FAQ
What does this email DNS checker test?
It reads four kinds of public DNS records for the domain you enter: MX (where your mail is delivered), SPF (which servers may send mail for the domain), DKIM (the key that proves a message was signed by your domain) and DMARC (what receivers should do with mail that fails these checks). It then explains each result in plain words.
Why are my emails going to spam even though SPF is set?
SPF is only one signal. Gmail and Outlook also look at DKIM, DMARC, your domain's reputation, how much you send and what people do with your mail. A missing DKIM key, a DMARC record without a policy, two SPF records, or an SPF record with more than 10 DNS lookups are common reasons. Read our guide on why emails go to spam.
Why can't the checker find my DKIM key?
A DKIM key lives under a name called a selector (for example google._domainkey.yourdomain.com). The checker tries the selectors that popular providers use. If your provider uses another one, type it in the selector box. You can find it in the DKIM-Signature header (s=) of a message you sent.
Can a domain have two SPF records?
No. A domain must have exactly one TXT record that starts with v=spf1. If you use several services, list them all in one record, for example v=spf1 include:_spf.google.com include:servers.mcsv.net ~all.
Which DMARC policy should I use?
Start with p=none and a rua= address to receive reports. Once all your real mail passes SPF or DKIM, move to p=quarantine and then p=reject, which gives the strongest protection against people sending mail in your name.
Is this tool free? Do you store the domains I check?
Yes, it is free and needs no sign-up. The check reads public DNS only. We keep each answer for two minutes so repeated checks are fast, and we do not keep a list of the domains people check.
Your business deserves a better inbox
Create your free account in a couple of minutes. Bring your domain, we take care of the rest.