Mail · DNS
SPF / DKIM / DMARC
Public DNS only — we do not send mail. Paste a domain to see if senders published SPF, DKIM and DMARC. That is what receivers use when mail bounces or lands in spam.
Selector optional · we also try google, selector1, selector2, default, k1
Lint a record
Paste a draft SPF, DMARC, or DKIM value before you publish. Quotes, commas, missing all, bad rua=, and the 255-character TXT cap show up here. Nothing is sent to DNS.
Plugged in, not showing?
- Mail in spam, not a bounce: SPF ~all or missing DMARC. Move DMARC to p=quarantine when reports look clean.
- Bounce “does not exist”: no MX (or MX pointing at a dead host). Fix MX before SPF.
- Google Workspace DKIM selector is usually google. Microsoft 365: selector1 and selector2.
- You just published records: wait for TTL (often 5–60 min). This lookup uses 1.1.1.1, not your ISP cache.
- Open a received message → Show original / headers. Look for spf=pass dkim=pass dmarc=pass.
Public DNS · we do not keep the domain · Fine print