Check Your Business Email Setup
Verify MX, SPF, DMARC and DKIM records so your email is delivered, not filtered.
Problem: Your business emails may be failing, going to spam, or not being delivered.
We look up the DNS records that receiving mail servers use to decide whether your email is legitimate: where mail is routed, who may send on your behalf, and what to do with messages that fail authentication.
What we'll check
- MX records and mail routing
- SPF record presence and validity
- DMARC record and policy strength
- Common DKIM selectors
- Duplicate or conflicting records
The three records that decide deliverability
- SPF lists the servers allowed to send mail using your domain. Published as a single TXT record starting
v=spf1. - DKIM cryptographically signs outgoing mail; the public key lives in DNS under a selector your provider gives you.
- DMARC tells receivers what to do when SPF and DKIM fail, and where to send reports. Published at
_dmarc.yourdomain.
Why your email goes to spam
- No SPF record, or a record that omits your actual sending platform.
- Two SPF records — receivers treat this as a permanent error.
- More than ten DNS lookups in your SPF chain, which also fails.
- No DKIM signing, so forwarded mail cannot be verified.
- No DMARC record, or
p=noneleft in place indefinitely. - A newsletter or CRM tool sending as your domain without being authorised.
How to fix it, in order
- Confirm MX records point only at your real mail provider.
- Publish one SPF record covering every legitimate sender.
- Enable DKIM signing in each sending platform and add its public key.
- Start DMARC at
p=nonewith a reporting address, review reports, then move toquarantineand finallyreject.
A note on DKIM detection
DKIM keys are stored under provider-specific selectors, so no tool can enumerate them all. We probe common selectors used by major providers. A negative result means we did not find those specific selectors, not that DKIM is absent.
Frequently asked questions
- Do I need all three of SPF, DKIM and DMARC?
- Yes for reliable business email. Major providers increasingly require authentication, especially for bulk senders.
- What DMARC policy should I use?
- Start at p=none while you review reports, then tighten to quarantine and reject once legitimate senders pass.
- Will fixing DNS stop all spam filtering?
- No. Authentication removes the technical reasons for filtering. Content, sending reputation and recipient behaviour still matter.