Free SPF, DKIM and DMARC checker for cold email domains
Enter a sending domain to check its SPF record, DMARC policy, DKIM key and MX records in one go, with a plain-English note on what to fix.
How the checker works
The checker looks up public DNS records for your domain through Google Public DNS, straight from your browser: the SPF TXT record, the DMARC record at _dmarc, DKIM keys at selector._domainkey and MX records.
Each found record adds to the score: SPF 34, DMARC 33 and DKIM 33. Notes flag common problems such as two SPF records, more than 10 lookups, a +all ending or a DMARC policy of none.
What each record does
| Record | Where | What it proves |
|---|---|---|
| SPF | TXT at your domain | Which servers may send mail for the domain |
| DKIM | TXT at selector._domainkey | The message was signed by the domain and not changed |
| DMARC | TXT at _dmarc | What receivers should do when SPF or DKIM fail, and where to send reports |
| MX | MX at your domain | Where replies to the domain are delivered |
Google's sender guidelines require SPF or DKIM for all senders, and SPF, DKIM and DMARC for bulk senders to Gmail (Google email sender guidelines).
Common fixes
- Two SPF records: merge them into one v=spf1 record.
- More than 10 lookups: remove unused include: entries.
- DKIM not found: find the selector in your mail provider's admin settings and enter it.
- DMARC p=none: fine to start; move to quarantine once reports are clean.
More in how to improve email deliverability and the best email deliverability tools.
SPF, DKIM and DMARC questions
How do I check my SPF, DKIM and DMARC?
Enter your domain above. The tool looks up each record in public DNS and explains what it found.
Why is my DKIM not found?
DKIM keys sit at a selector your provider chooses. Google Workspace often uses "google" and Microsoft 365 "selector1" or "selector2". Enter yours if the common ones miss.
What DMARC policy should I use for cold email?
Start with p=none and a rua address to collect reports, then move to quarantine or reject once legitimate mail passes.
Is this checker private?
It sends only DNS lookups for the domain you enter to Google Public DNS. Nothing is stored by Revbound.
Results depend on public DNS at the time of the check and can lag recent changes.
Authenticated and landing. Now answer the replies.
Revbound puts replies from every sequencer in one inbox and books meetings from them.