Is your domain ready to send email?
Enter your domain. We look up its MX, SPF, DKIM and DMARC records, tell you which ones are missing or wrong, and how to put them right. We don't store the domain.
Checking…
- Reading MX records
- Checking the SPF record and its DNS lookups
- Looking for DKIM keys at common selectors
- Reading the DMARC policy
What we check
- MX: can replies reach this domain?
- SPF: is there exactly one record, does it end in +all, does it stay under 10 DNS lookups?
- DKIM: is there a key at a common selector (google, selector1, selector2, default, k1)?
- DMARC: is there a record, and is the policy none, quarantine or reject?
Short answer: A domain that sends business email needs four DNS records: MX so replies can reach you, SPF to list the servers allowed to send on your behalf, DKIM to sign each message, and DMARC to say what happens when those checks fail. Since February 2024 Gmail and Yahoo have required SPF or DKIM from every sender, and all three from anyone sending more than 5,000 emails a day.
FAQ
Can I send email without SPF, DKIM and DMARC?
You can, but it may not arrive. Since February 2024 Gmail and Yahoo have required SPF or DKIM from every sender, and all three from anyone sending more than 5,000 emails a day. Mail from domains without them often goes to spam or gets rejected.
I have DKIM set up, so why didn't the tool find it?
DKIM keys are published under a name your provider chooses, called a selector. We only check the common ones: google, selector1, selector2, default and k1. If your provider uses another name, your key is fine but won't show here. Look at the headers of an email you've sent: the s= value in the DKIM-Signature line is your selector.
Should I set my DMARC policy to reject straight away?
No. Start with p=none and use the reports to confirm that everything sending as you (your mailbox, invoicing software, newsletter tool) passes SPF and DKIM. Then move to quarantine, and to reject after a few quiet weeks. Going straight to reject can block mail from a service you forgot about.
Do you store the domains people check?
No. The lookup only runs to show you the result; the domain isn't saved to a database or written to logs. To prevent abuse we keep a daily counter keyed to a hash of your IP address, which resets each day.
Records in order? The next step is the first emails
Repmight sends from your own mailbox, starting at 10 emails a day and adding 5 a day up to 50. The dashboard runs this same DNS check on each brand's sending domain.