Email DNS Checker
NEWEnter any domain to instantly check its MX mail servers, SPF sender policy, and DMARC record. Each result shows a green or red status pill so you can spot email deliverability issues at a glance.
No data yet.
DKIM: DKIM records require a selector (e.g. default._domainkey.example.com). Use the
DNS Lookup tool with record type TXT and the full selector name to verify DKIM.
How to use Email DNS Checker
- Enter your domain name (e.g. example.com) in the input field — no need to include http:// or a path.
- Click Check to query MX, SPF, and DMARC records simultaneously via Google DNS.
- Review the green (found) or red (missing) status pills and the record values for each category.
What is Email DNS Checker?
Proper email DNS configuration is critical for deliverability. MX records tell the internet which mail servers accept email for your domain. SPF (Sender Policy Framework) defines which IP addresses may send mail on behalf of your domain, preventing spoofing. DMARC (Domain-based Message Authentication, Reporting and Conformance) builds on SPF and DKIM to specify how receiving servers should handle unauthenticated mail — and where to send reports.
This tool queries Google's DNS-over-HTTPS API to retrieve MX, SPF, and DMARC records in real time without requiring you to install any software. Missing or misconfigured records are flagged with a red pill, with guidance on what to add. DKIM verification is explained separately because it requires knowing your mail provider's selector value.
FAQ
- Why is my SPF record showing as missing?
- An SPF record is a TXT record at your root domain containing v=spf1. If it is missing, receiving mail servers may reject or junk your outgoing email. Contact your domain registrar or hosting provider to add one. A typical record looks like: v=spf1 include:_spf.google.com ~all
- What does a DMARC policy do?
- DMARC tells receiving servers what to do with email that fails SPF or DKIM checks: none (monitor only), quarantine (send to spam), or reject (block completely). It also lets you receive aggregate reports about who is sending email from your domain, helping detect spoofing attempts.
- Why can't DKIM be checked here?
- DKIM records are published under a selector-specific subdomain such as default._domainkey.example.com. The selector name depends on your email provider and is not standardised, so there is no single DNS record to check. Use the DNS Lookup tool with the full selector name (e.g. google._domainkey.yourdomain.com) to verify your DKIM record.
Related tools
Last updated: