VayloMailSee pricing

Check your domain's email DNS records.

This free checker looks up the MX, SPF, DMARC and, if you know it, DKIM records for a domain. It explains each one in plain English, so you can see what is published and what is missing.

Free · no sign-up needed

Check a domain

The domain your email is sent from, such as example.com. Leave out http:// and any path.

Your mail provider gives you this name. Leave it blank to check MX, SPF and DMARC only. A DKIM key can only be found by its selector.

What each record checks

Each check ends with one of four labels. Looks good means the record is published and set up sensibly. Needs attention means it is published but could be stronger. Problem means it is missing or broken. Note means the check was not run, usually because no selector was entered.

MX: where mail is delivered

MX records name the servers that accept mail for the domain. Without them, nothing tells other mail servers where to deliver mail sent to the domain.

SPF: which servers may send

SPF is a TXT record that lists the servers allowed to send mail for the domain. A domain should have exactly one SPF record, and it should end in -all or ~all. +all allows any server to send as the domain. ?all gives no answer for servers that are not listed.

DMARC: what happens to failing mail

DMARC is a TXT record at _dmarc under your domain. It tells receivers what to do with mail that fails SPF and DKIM, and where to send reports. p=none only monitors. p=quarantine and p=reject apply a policy. For a step-by-step guide to adding these records, see DNS records for a mail server.

DKIM: the signing key

DKIM signs outgoing mail with a key published in DNS at selector._domainkey under your domain. A domain can have several keys, one per selector, so the checker needs the selector to find one. "Not found" means either the selector is wrong or the key is not published.

What this check does not do

The checker reads public DNS only. It does not connect to your mail server, send a test message, or confirm that mail is delivered rather than filtered. A record can be correct and mail can still land in spam. Results show what public DNS returns at the time of the check, and DNS changes can take time to spread.

It accepts domain names only, not IP addresses, and it looks up only the names described above.

VayloMail configures SPF, DKIM, DMARC and reverse DNS on the managed mail servers it provides. See technical details.

Find the right setup.