SPF, DKIM and DMARC checker
Read all three of a domain's email authentication records in one go, as receivers read them.
Why the three records are one system
SPF and DKIM each authenticate a message: SPF says which servers may send with your domain in the envelope sender, DKIM proves a message was signed with a key you published. Neither one decides anything. DMARC is the record that decides, and the record that asks receivers for reports: it tells them what to do when a message claims your domain and passes neither check, and where to mail the summaries of what they saw.
The link between them is alignment, which is why an SPF, DKIM and DMARC checker is more useful than three separate ones. A message passes DMARC only when SPF or DKIM passes and the domain that passed matches the one in the From line. That is why a domain can hold a valid record of each kind and still fail: each section above reads its own record, and the summary at the top says which one to start with.
The reports this checker cannot see
This page reads your DNS right now, no account needed. The weekly digest reads what receivers saw: every sender using your domain, what failed, and what to do about the rest. Free for your first domain.
Get the weekly digestNo card · 12+ months of history · The free plan does not expire