Simple dmarc spf dkim checker

This dmarc spf dkim checker is designed to help you check your email setup is secure and properly configured. It checks three key email authentication protocols: DMARC, SPF, and DKIM. Google recently made changes to require valid authentication checks, making these checks the essential first step towards getting your emails delivered.

What do these checks do?

SPF Check

SPF (Sender Policy Framework) ensures that emails are sent from authorised servers. The SPF check involves looking up the SPF record in your domain’s DNS (Domain Name System) settings. This record lists the IP addresses and servers that are allowed to send emails on behalf of your domain. If an email is sent from an unauthorised server, the SPF check fails, and the email will be marked as suspicious or rejected. This helps stop unauthorised users from sending emails that look like they come from your domain.

DKIM Check

DKIM (DomainKeys Identified Mail) adds a digital signature to your emails, ensuring their content remains unchanged during transit. The DKIM check verifies this signature against a public key published in your domain’s DNS records. If the signature is valid, it confirms that the email hasn’t been altered and comes from an authorised sender. This helps maintain the integrity of your emails and builds trust with recipients by proving that your emails are authentic.

DMARC Check

DMARC (Domain-based Message Authentication, Reporting, and Conformance) makes sure that incoming emails are correctly authenticated against the sender’s domain. The DMARC check verifies if an email passes the SPF and DKIM checks and aligns with the domain specified in the “From” header. If these conditions are met, the email is considered legitimate. This check helps prevent email spoofing, where attackers send emails that appear to come from your domain.

Additional checks

• For users sending over 5,000 emails a day your spam score needs to be below 0.3%. Spam is reported by users, so allowing them to unsubscribe or opt out is important to keeping this value down. By only emailing users who have opted in to being contacted, you should be able to easily keep this number down.
• Setting up valid forward and reverse DNS (PTR) will also help with your email deliverability. Google checks that the sending IP address matches the ip in the hostname of the PTR record as a way of figuring out legimate emails.
• IP reputation is an additional item to be aware of. Check spamhaus to make sure your domain or IP arent listed. Google also offers a Postmaster tool which lets you check the reputation of your domains. If you plan on sending many emails, this can be a good way to know how your website reputation stands in their eyes.

In general, email is hard to get right, but with the above dmarc spf dkim checker you should be able to get your messages delivered. Using a service such as Amazon AWS Simple Email Service (SES) will also vastly improve your chances of deliverability – provided you set up the above checks correctly.