Email deliverability checker
Enter your domain to check SPF, DKIM, and DMARC records. Get a 0-100 health score and step-by-step fixes for every issue found.
Common selectors:
Enter your domain above to check SPF, DKIM, and DMARC
How to check email deliverability
Enter your sending domain (e.g. company.com) in the Domain field above and choose your DKIM selector. If you use Google Workspace, select the "google" chip. For Microsoft 365, try "selector1". Click "Check deliverability" and the tool will query your domain's DNS in real time.
Results appear as three scored cards: SPF (up to 30 points), DKIM (up to 35 points), and DMARC (up to 35 points). Each card shows the raw DNS record, a plain-English status, and a list of specific fixes when issues are detected. The combined score out of 100 is shown in the gauge at the top of your results.
If you do not know your DKIM selector, log in to your email provider admin panel and look under email authentication or DKIM settings. You can also try the common selectors in the chip row above the input field.
Understanding SPF, DKIM, and DMARC records
SPF, DKIM, and DMARC are three independent DNS authentication standards that together tell receiving mail servers whether your email is legitimate. Each solves a different piece of the authentication problem and they work best when all three are configured.
SPF (Sender Policy Framework) is a DNS TXT record at your root domain that lists which servers are allowed to send mail on your behalf. A common SPF record looks likev=spf1 include:_spf.google.com -all. The -all at the end means any server not listed should be rejected.
DKIM (DomainKeys Identified Mail) adds a cryptographic signature to every message your mail server sends. The receiving server looks up the public key in your DNS atselector._domainkey.yourdomain.comand verifies the signature. This confirms the message was not altered in transit.
DMARC (Domain-based Message Authentication) ties SPF and DKIM together with a policy. It lives at_dmarc.yourdomain.comand tells receivers what to do when mail fails both SPF and DKIM: p=none (report only), p=quarantine (send to spam), or p=reject (block outright). It also gives you a reporting address so you can see who is sending mail as your domain.
Why email deliverability matters for cold email
Cold email campaigns that land in the inbox depend on strong DNS authentication. Gmail and Outlook require SPF and DKIM to pass before any reputation scoring even begins. A missing DMARC record means inbox providers cannot verify your domain's sending policy, which lowers placement rates on high-volume sends.
Domains without authentication records are significantly more likely to be flagged as potential spam sources. Even a single missing SPF record can cause 10-20% of your messages to land in spam at scale. DKIM failure triggers similar penalties because it suggests the message may have been tampered with.
Fixing authentication issues is free and takes 15-30 minutes with your DNS provider. It is the highest-leverage deliverability improvement you can make before optimizing sending frequency, subject lines, or list quality. Use this checker after any DNS change or provider migration to confirm nothing broke.