Email DNS Checker
Why do your invoices land in spam? Check your SPF, DKIM and DMARC records — explained in plain language, with fix steps.
Check your domain
Something not working?
Tell us what went wrong — it helps us fix the tool. Only what you type below is sent; checked domains are never stored.
Need more power? Meet Email DNS Pro
One-time payment. Yours forever. No subscription.
| Feature | Free | Pro |
|---|---|---|
| SPF / DKIM / DMARC checks with plain-language fixes | Yes | Yes |
| Checks per day | Unlimited | Unlimited |
| PDF audit report for clients | — | Yes |
| Before/after comparison history | — | Yes |
| Ads | Shown on page | Ad-free |
| Updates | — | Lifetime free updates |
Frequently asked questions
Why do my emails go to spam even though I set everything up?
The usual culprits: two SPF records (receivers then ignore SPF completely), more than 10 DNS lookups in SPF (a "permerror" failure), a missing DKIM signature, or a DMARC policy of "p=none" which enforces nothing. This checker flags each of them in plain language.
What is the SPF 10-lookup limit?
SPF allows at most 10 DNS queries while evaluating a record. Every "include:", "a", "mx" or "redirect" counts — including nested ones inside your providers' records. Exceed it and SPF fails outright. This tool counts your direct lookups and warns you before you hit the ceiling.
How does this check work without a server?
Your browser queries Google's public DNS-over-HTTPS endpoint directly (dns.google), which allows cross-origin requests. The records are analyzed on your device — no account, no storage, nothing uploaded.
What should my DMARC policy be?
Start with "p=none" plus a "rua=" reporting address to collect data, move to "p=quarantine" when reports look clean, and end at "p=reject". Email DNS Pro exports a client-ready PDF audit of the whole setup.