Mail · DNS

SPF / DKIM / DMARC

Public DNS only — we do not send mail. Paste a domain to see if senders published SPF, DKIM and DMARC. That is what receivers use when mail bounces or lands in spam.

Selector optional · we also try google, selector1, selector2, default, k1

Lint a record

Paste a draft SPF, DMARC, or DKIM value before you publish. Quotes, commas, missing all, bad rua=, and the 255-character TXT cap show up here. Nothing is sent to DNS.

Plugged in, not showing?

  • Mail in spam, not a bounce: SPF ~all or missing DMARC. Move DMARC to p=quarantine when reports look clean.
  • Bounce “does not exist”: no MX (or MX pointing at a dead host). Fix MX before SPF.
  • Google Workspace DKIM selector is usually google. Microsoft 365: selector1 and selector2.
  • You just published records: wait for TTL (often 5–60 min). This lookup uses 1.1.1.1, not your ISP cache.
  • Open a received message → Show original / headers. Look for spf=pass dkim=pass dmarc=pass.

Public DNS · we do not keep the domain · Fine print