What this checks
- SPF says which servers may send mail for your domain.
- DKIM puts a digital signature on your mail.
- DMARC tells receivers what to do when those checks fail.
This is public information, so you can check any domain. The check only looks at the settings. It doesn’t send any mail, and it can’t tell whether your mail actually arrives.
What to do with the result
- SPF or DMARC missing or weak? The record builder produces the records to add, based on the services you use.
- DKIM unknown? That usually means your provider uses its own selector name. Turn DKIM on in your provider’s admin panel, and confirm it by sending yourself a test mail: the message headers should show
dkim=pass. - Everything green? Check again after you add a new service that sends mail for you, such as a newsletter tool.