Check your domain's SPF, DKIM, DMARC and MX records in one click, and see exactly what to fix before your next campaign. Free, no signup.
Your sending domain
Test your email deliverability in one click: MX, SPF, DKIM and DMARC checked live from your browser. Free, with no signup.
Enter your domain
Type your sending domain, or paste an email address and we'll extract the domain.
We query DNS live
Your browser looks up the domain's MX, SPF, DKIM and DMARC records over secure DNS.
Read each verdict
Every record gets an OK, WARNING, MISSING or ERROR status with plain-English issues.
Fix what's failing
Each failing check links to a free generator that builds the correct record for you.
When emails land in spam, the first suspects are four DNS records. MX proves your domain can receive replies. SPF lists the servers allowed to send as your domain. DKIM adds a cryptographic signature that receivers verify. DMARC tells Gmail, Yahoo and Outlook what to do when SPF or DKIM fails, and whether to trust your mail at all.
Testing email deliverability therefore starts here: mailbox providers evaluate these records on every single message you send. This free test queries DNS live from your browser and grades each record OK, WARNING, MISSING or ERROR, with the exact issue spelled out in plain English.
Most record checkers make you test SPF, DKIM and DMARC in three different tools and stitch the answers together yourself. This test runs all of them (plus MX) in one pass and applies the validation rules that cause real-world failures: multiple SPF records are a permanent error under RFC 7208, +all authorizes anyone to send as you, more than 10 DNS lookups breaks SPF entirely, and a DMARC policy of p=none is monitoring only.
DKIM is the record most tools skip, because it lives under a selector you have to know in advance. We solve that by reading your MX records first: if your mail runs on Google Workspace we probe the google selector, if it runs on Microsoft 365 we probe selector1 and selector2, and otherwise we try the most common generic selectors like default, k1 and mail.
Gmail and Yahoo score the reputation of your sending domain, and authentication is how that history gets attributed to you. Every message that passes SPF and DKIM with an aligned From domain adds to your domain's track record; unauthenticated mail either builds no reputation or, increasingly, gets rejected before it can.
DMARC is what makes that reputation yours alone: with an enforcing policy, spammers can no longer send as your domain and burn your reputation for you. That is why a complete record set matters even for small senders: it protects the asset every future campaign depends on.
Records are the entry ticket, not the whole game. Once they pass, email domain reputation is earned through engagement: real replies, low bounce rates, and complaint rates kept under 0.3%.
DNS records drift. A new marketing tool adds a second SPF record and silently breaks the first. An IT migration drops your DKIM key. A registrar change wipes the _dmarc entry. A ten-second email deliverability check before each campaign catches these regressions before they cost you a week of inbox placement.
Be equally clear about what a record check cannot see: your actual inbox-versus-spam placement, your live reputation score, or how providers judge your content. Those depend on how you send, which is exactly the part Emailchaser automates, pacing your outreach and personalizing every message so healthy records turn into replies.
Emails get filtered to spam for four largely independent reasons, and it helps to diagnose them in that order. Authentication comes first because it is binary and fixable in minutes: if SPF, DKIM or DMARC is missing or broken, Gmail and Yahoo cannot attribute the mail to you, and that is exactly what this test measures. Content is second: spam-trigger phrasing, a bare link-heavy body, misleading subject lines and image-only messages all raise the score against you. Reputation is third: mailbox providers keep a running history for your sending domain and IP, and a domain with no track record starts from neutral, not trusted. Volume and behaviour are fourth: sending faster than a warmed domain should, mailing stale lists that bounce, or provoking complaints will sink even perfectly authenticated mail.
The practical implication is that fixing your records is necessary but rarely sufficient. A brand-new domain with flawless SPF, DKIM and DMARC will still see poor placement if it sends five hundred cold emails on day one, because it has no reputation and the volume looks automated. Pass the authentication checks here first (they are the cheapest wins), then protect the other three by warming the domain gradually, keeping bounce rates low, and pacing sends so they resemble a person rather than a blast.
In February 2024, Gmail and Yahoo turned long-standing best practice into hard requirements. Every sender, at any volume, now has to authenticate with at least SPF or DKIM, publish valid reverse DNS (PTR) for the sending IP, and stop forging a Gmail From address. Cross roughly 5,000 messages a day to Gmail addresses and you are classed as a bulk sender, at which point the bar rises sharply. The count is per day from your domain, so a single large campaign can tip you over it.
Bulk senders must authenticate with both SPF and DKIM, publish a DMARC record (p=none meets the minimum), and add one-click unsubscribe: a List-Unsubscribe header plus the List-Unsubscribe-Post value defined in RFC 8058, with the request honoured within two days. The hardest bar to hold is the spam rate: Google asks you to stay under 0.3% complaints in Postmaster Tools and warns that even brushing 0.1% causes problems. Because 0.3% is only three complaints per thousand delivered, list quality and relevance matter more than any single record.
The requirement people most often miss is DMARC alignment. It is not enough for SPF or DKIM to pass in isolation: the domain each one authenticates has to match the domain in your visible From address (relaxed alignment accepts the same organizational domain). A classic failure is sending through a platform that signs with its own domain and sets its own Return-Path: SPF and DKIM both pass, yet DMARC fails because nothing aligns to your From domain. If you send from a subdomain, publish records there and make sure your DMARC sp= policy covers it.
Each record is graded OK, WARNING, MISSING or ERROR. MISSING means the record does not exist; ERROR means it exists but is invalid, or the lookup itself failed; WARNING means it works but is weaker than it should be. MX rarely warns: it is either present, so your domain can receive replies, or MISSING, which for a sending domain means bounced replies and a weaker trust signal. SPF has three classic failures: two or more v=spf1 records on the domain (a permanent PermError under RFC 7208, so merge them into one), a record ending in +all or with no -all or ~all at all (which authorizes the whole internet to send as you), and more than ten DNS lookups from chained include: statements (also a PermError). The free SPF record generator rebuilds a single clean record if yours has drifted into any of these.
DKIM is the record most likely to look broken when it is actually fine. Because the key lives at selector._domainkey.yourdomain.com, the test has to infer the selector from your provider: google for Workspace, selector1 and selector2 for Microsoft 365, then generic names like default, k1 and mail. A MISSING DKIM result therefore means not found under the common selectors, not definitely absent: if you sign with a custom selector, confirm the exact record your platform issued. A genuine problem shows up as a WARNING when the key exists but its p= value is empty, which means the key was revoked and needs republishing.
DMARC warnings are usually about strength, not absence. p=none is the most common: it is valid and satisfies the Google and Yahoo minimum, but it only monitors. It tells receivers to do nothing when mail fails, so it protects your domain from no one. Moving to p=quarantine and then p=reject is what actually stops spoofing, and the DMARC record generator walks through that ramp. Watch too for pct= below 100 (the policy applies to only a fraction of mail), a missing rua= tag (you receive no aggregate reports to learn from), and two DMARC records at once, which receivers treat as if none exists.
What does this email deliverability test check?
It checks the four DNS records mailbox providers use to authenticate your mail: MX (can the domain receive replies), SPF (which servers may send for it), DKIM (cryptographic signing, probed across common selectors), and DMARC (the policy that ties them together). Each record gets an OK, WARNING, MISSING or ERROR status plus a plain-English explanation of any issue, using the same rules (like SPF's 10-lookup limit and the one-record rule) that cause real failures.
How do I test email deliverability?
Start with your DNS: enter your sending domain above and the test grades your MX, SPF, DKIM and DMARC records in seconds. If any record is missing or misconfigured, fix that first: it is the most common and most fixable cause of spam placement. Beyond records, deliverability depends on your sending behaviour, so also watch your volume, list quality and reply rates.
Why are my emails going to spam?
The usual causes fall into three buckets: authentication (missing or broken SPF, DKIM or DMARC records), content (spammy wording, heavy links or images), and sending behaviour (sudden volume spikes, stale lists, high bounce or complaint rates). Records are the easiest to diagnose and fix, which is why this test starts there. If your records pass but you still land in spam, look at your list quality and at how much and how fast you send.
What are the Google and Yahoo sender requirements?
Since February 2024, Gmail and Yahoo require all senders to authenticate with SPF or DKIM, and bulk senders (roughly 5,000+ messages a day to Gmail) to have both SPF and DKIM, publish a DMARC policy (at least p=none), align the From domain with the authenticated domain, offer one-click unsubscribe, and keep spam complaint rates below 0.3%. Mail that fails these checks is increasingly rejected outright rather than just filtered to spam.
What is a DKIM selector, and why do you probe common ones automatically?
A DKIM selector is the label that tells receivers where to find your public key in DNS. The record lives at selector._domainkey.yourdomain.com, so it cannot be looked up without knowing the selector name. This test detects your email provider from your MX records and automatically probes that provider's usual selectors: google for Google Workspace, selector1 and selector2 for Microsoft 365, plus common generic names like default, k1 and mail. If you sign with a custom selector, DKIM may still be configured correctly even if the probe reports it missing.
Does this test show my actual inbox placement?
No, and no DNS-based test can. This tool checks whether your authentication records are present and correct, which is necessary for reaching the inbox but not sufficient: actual placement also depends on your domain reputation, content and recipient engagement, which only mailbox providers can see. Treat a passing result as confirmation that nothing in DNS is holding you back, then earn inbox placement through good list hygiene and measured sending.
What is the difference between SPF, DKIM and DMARC?
They are three layers of the same authentication system. SPF is a DNS list of the servers allowed to send mail for your domain; DKIM adds a cryptographic signature that proves a message was not altered and really came from your domain; and DMARC ties the two together, telling receivers what to do when a message fails both and whether the passing domain aligns with your visible From address. You want all three because SPF breaks on forwarding, DKIM survives it, and DMARC is what turns the pair into a reputation and anti-spoofing policy.
Why does my domain fail the SPF check when I already have an SPF record?
Having a record is not the same as having a valid one. The three failures this test flags are: more than one v=spf1 record on the domain (RFC 7208 allows exactly one, so two produce a permanent error), a record that ends in +all or omits -all and ~all entirely (which authorizes any server to send as you), and a record whose include: chains require more than ten DNS lookups (which also fails permanently). Consolidating everything into a single record under the ten-lookup limit fixes all three.
Should my DMARC policy be none, quarantine, or reject?
Start at p=none to collect aggregate reports without affecting delivery, then move to p=quarantine and finally p=reject once the reports show only your legitimate senders passing. p=none meets the Google and Yahoo minimum but provides no protection: it only monitors, so spoofed mail is still delivered. Reject is the goal because it is the only policy that actually stops someone sending as your domain, so treat none as a temporary observation phase rather than a destination.
How many emails a day makes me a bulk sender under the Google and Yahoo rules?
Google draws the line at roughly 5,000 messages a day sent to Gmail addresses from the same domain, and once you cross it Google keeps treating you as a bulk sender going forward. The count is per day and specific to Gmail recipients, so a single large campaign can push you over even if your average is lower. Yahoo applies comparable expectations without publishing an exact number, so the safe assumption is that any serious sending programme should meet the full bulk requirements: both SPF and DKIM, a DMARC policy, and one-click unsubscribe.
Can I test email deliverability without sending a test email?
Yes. This tool checks deliverability entirely over DNS, so it needs only your domain: no test send, no inbox to log into, and no seed list. That tells you whether your authentication and routing are correct, which is the part you can fix directly. It cannot show live inbox-versus-spam placement, because that depends on reputation and content only mailbox providers can see; for that you would send to a seed set of real inboxes and observe where each message lands.
Ready to 10x your pipeline?
Send your first cold email campaign today.
Start my free trialAddress: 151 Calle de San Francisco San Juan, Puerto Rico
Email: support@emailchaser.com
Product
Cold Email SoftwareAutopilotEmail FinderCampaignsSales CRMLead FinderEmail AccountsEmail WarmupEmail VerifierCold Email APIMCP ServerAPI documentationWho it's for
FreelancersFoundersSales teamsMarketing agenciesRecruitment agenciesLead generation agenciesComparisons
Best cold email softwareInstantly alternativesSmartlead alternativesInstantly vs EmailchaserSmartlead vs EmailchaserHunter vs EmailchaserFree tools
All free toolsBulk Email VerifierDeliverability TestEmail Header AnalyzerSMTP Settings FinderCold Email TemplatesBoolean Search BuilderAudience Size CalculatorName SplitterCompany Email FormatSpam Word CheckerInternational
Cold email (ES)Cold email (FR)Cold email (DE)Cold email (IT)Cold email (PT)Verifica email (IT)© Copyright 2026 Emailchaser