SPF, DKIM & DMARC checker
Enter your domain to check the DNS records that tell Gmail and Outlook your cold email is really from you. Get plain-English results and the exact fix for Google Workspace or Microsoft 365.
What this checker looks at.
SPF
A TXT record on your domain listing the servers allowed to send as you. We check that there is exactly one, how it ends (-all, ~all, ?all or the dangerous +all), and roughly how many DNS lookups it needs, including nested includes — more than 10 and receivers treat it as broken.
DKIM
A signature your mail provider adds to every message, verified with a public key in DNS under a "selector". DNS has no way to list selectors, so we try the common ones (google, selector1, selector2, default, k1, s1, s2, mail, dkim, zoho, mandrill). If none match, DKIM may still be set up under a custom selector — confirm in your admin console.
DMARC
A TXT record at _dmarc.yourdomain that tells receivers what to do when SPF and DKIM fail, and where to send reports. We read the policy (none, quarantine or reject) and whether reports (rua) are switched on. Gmail and Yahoo require DMARC from bulk senders.
MX
The servers that receive mail for your domain. Cold email is a conversation, so replies need somewhere to land — and receivers are wary of domains that can't receive mail.
Does passing guarantee the inbox?
No. Authentication is the entry ticket. Inbox placement also depends on your domain's reputation, how many emails you send per day, your list quality and whether people reply.
Records fixed? Send like it.
Outly sends through your own Google Workspace or Microsoft 365 inbox, paced through the day, with a warm-up ramp for new inboxes and an inbox health check that slows down when bounces rise.
250 leads free. No card to start.