All Tools

SPF & DKIM Check

Verify SPF and DKIM DNS records for a domain to check if email authentication is properly configured.

Frequently Asked Questions

Common questions about the SPF & DKIM Check tool.

Sender Policy Framework is a DNS TXT record that lists which IPs are authorised to send email for your domain. Receivers check the SPF on every incoming message to detect forged From domains.

DomainKeys Identified Mail adds a cryptographic signature to every outbound message. The receiving server fetches the public key from DNS and verifies the signature — proving the message wasn't tampered with in transit.

Each DKIM key has a short name (selector) so one domain can have multiple active keys. The full DNS record lives at `{selector}._domainkey.{domain}`. Common selectors: `default`, `google`, `s1`, `mxvault`, `k1`.

Mail will still deliver, but with lower inbox-placement rates and no protection against in-transit tampering. Enterprise mail providers like Microsoft 365 and Google Workspace enforce DMARC, which requires either SPF or DKIM alignment — so DKIM is strongly recommended.

More Free Tools

Mail Header Analyzer
MX Record Lookup
Port Check
Ping Test
Traceroute
DNS Lookup
Reverse DNS (PTR)
SSL Certificate Checker