Nomlen logo
email authentication· MX · SPF · DKIM · DMARC · free

SPF, DKIM & DMARC checker

Test MX, SPF, DKIM and DMARC in seconds — get a 0–100 score and exact fixes.

Checks MX, SPF, DKIM and DMARC records live — 10 free checks per day, no signup.

MX

Can you receive email?

SPF

Who may send as you?

DKIM

Are emails signed?

DMARC

What happens to fakes?

What you get

Stop landing in spam.

Missing or misconfigured email authentication is the #1 reason legitimate emails get filtered. Check all four records side by side and fix them in minutes.

MX record check

Confirms your domain has working mail servers configured. No MX records means you can't receive email at all — we catch that first.

SPF validation

Checks that your SPF record is valid, warns about the 10 DNS-lookup limit, multiple records, and overly permissive +all endings.

DKIM detection

Probes 11 common DKIM selectors (google, selector1, default, and more) to confirm your emails carry a valid cryptographic signature.

DMARC policy review

Reads your DMARC record and tells you whether you're in monitoring mode (p=none) or actually enforcing — with a safe upgrade path.

Keep exploring

Related free tools

Bulk Domain Search

Check availability for hundreds of domains at once.

Try it

Bulk WHOIS Check

WHOIS data for many domains in one pass.

Try it

DNS Checker

Look up A, MX, TXT, NS and more DNS records instantly.

Try it
Stop second-guessing.

Find your domain in the next 30 seconds.

Free forever. No login required. 1,100+ TLDs in one query — plus AI suggestions and the premium marketplace.

Start checking now Learn more
1,147
TLDs
200ms
Avg lookup
100
Suggestions/query
FAQ

Email deliverability, explained.

It's whether your emails land in the inbox or get filtered to spam (or rejected entirely). The biggest factors are your authentication records — MX, SPF, DKIM and DMARC — plus your sending reputation.
Each of the four checks (MX, SPF, DKIM, DMARC) is worth 25 points. 80+ means your emails are well protected; 50–79 means fix the warnings; below 50 means your mail is very likely being filtered.
SPF (Sender Policy Framework) lists which servers may send email for your domain. Without it, anyone can spoof your address and receivers treat your mail as suspicious. One broken SPF record is one of the most common deliverability killers.
DKIM adds a cryptographic signature to each message so receivers can verify it wasn't tampered with. DMARC is the policy layer: it tells receivers what to do with mail that fails SPF/DKIM, and sends you reports about abuse of your domain.
p=none is the correct first step — it turns on reporting without blocking anything, so you can see who's sending as your domain. But it doesn't stop spoofing, which is why we recommend moving to quarantine and then reject after a few clean weeks.
Ten deliverability checks per day per visitor, free, with no account required. Each check runs live DNS queries against your domain.
The most common technical cause is missing or broken email authentication: without valid SPF, DKIM and DMARC records, receiving servers cannot verify the mail really came from you and treat it as suspicious. Content and sender reputation also play a part.
Publish a TXT record at _dmarc.yourdomain that starts with v=DMARC1 and a policy such as p=none for monitoring. Move to p=quarantine or p=reject once you have confirmed all your legitimate senders pass authentication.
Start with p=none plus a reporting address so you can see who sends mail as your domain without blocking anything. Tighten to quarantine, then reject, after legitimate sources are passing.
Yes. The provider gives you the records to publish, but they only protect your mail once you add the SPF entry and DKIM keys to your own DNS and turn signing on.