Check the Three DNS Records Gmail and Yahoo Expect From Every Sender
Enter your domain and this free SPF DKIM DMARC checker reads your email DNS records and explains them in plain English. It counts your SPF lookups against the limit of 10, tries 62 common DKIM selectors, reads your DMARC policy, and checks MX, BIMI, MTA-STS and TLS-RPT. Every problem comes with the exact fix and a record you can copy.
Email DeliverabilityFree Checker Tool
OfficialStape PartnerEnter the domain you send email from. Add your DKIM selector if you know it.
Lookups run from your browser through Google or Cloudflare public DNS. Only the domain name is looked up. If you type an email address, the part before the @ is not sent anywhere. We keep a simple log of the domain checked and the result.
Get the full Excel report with every record and the suggested fixes in your inbox.
I connect Klaviyo, HubSpot and other email tools to GA4 and your ad platforms, so revenue from email is measured next to your ads.
The DNS records that receiving mail servers read before they decide between inbox and spam.
Whether you have exactly one, how it ends, and whether any term is misspelled.
Follows every include and redirect to count DNS lookups against the limit of 10.
Names the services found in your SPF, such as Google Workspace, Microsoft 365, Klaviyo and Mailchimp.
Tries 62 common selectors plus your own, then checks key type, length, revoked keys and the testing flag.
none, quarantine or reject, in business terms, plus pct, sp and alignment.
Whether a report address is set, valid, and allowed to receive reports for your domain.
Who receives your mail, and the optional records that add a logo and encryption reporting.
Whether you meet the DNS part of Gmail’s and Yahoo’s sender requirements.
Three steps, usually under ten seconds.
Type the domain after the @ in your email address, or paste the whole address.
The tool looks up the public TXT and MX records and follows every SPF include.
Each finding says what it means for your email and gives the record to add or change.
They are three public DNS records that prove an email really comes from you. Receiving mail systems such as Gmail, Yahoo and Outlook read them on every message. If they are missing or broken, more of your email goes to spam, and anyone can send mail that looks like it came from your domain.
-all (hard fail): reject mail from any server not on the list.~all (soft fail): treat it as suspicious. The usual choice when you also have DMARC.?all (neutral): no opinion. Almost no protection.+all: allow every server in the world. Never use it.SPF allows at most 10 DNS lookups. Each include, a, mx, exists and redirect counts, and so do the ones nested inside them. Go over the limit and SPF returns an error for all your mail. This checker follows every include and shows what each one costs.
p=none: monitor only. You get reports, but fake mail is still delivered.p=quarantine: failing mail goes to spam.p=reject: failing mail is refused.Move in stages: none → quarantine → reject. Start with none and a report address, fix every real sender that fails, then tighten.
Since February 2024, Google and Yahoo ask every sender for SPF or DKIM. Bulk senders need both SPF and DKIM, plus a DMARC record of at least p=none, a From domain that aligns with SPF or DKIM, one-click unsubscribe and a spam complaint rate below 0.3%. Google counts a bulk sender as one that sends about 5,000 or more messages a day to Gmail accounts. This tool reports the DNS part only.
Where each record lives and what a healthy one looks like.
| Record | Where it lives | Healthy example | What goes wrong |
|---|---|---|---|
| SPF | TXT at your domain | v=spf1 include:_spf.google.com ~all | Two records, more than 10 lookups, +all |
| DKIM | TXT at selector._domainkey.your domain | v=DKIM1; k=rsa; p=MIIB… | Not turned on in the email tool, 1024-bit key, empty p= |
| DMARC | TXT at _dmarc.your domain | v=DMARC1; p=quarantine; rua=mailto:… | Missing, stuck on p=none, no report address |
| MX | MX at your domain | 1 aspmx.l.google.com | Missing, so replies cannot reach you |
| BIMI | TXT at default._bimi.your domain | v=BIMI1; l=https://…/logo.svg | Published before DMARC is enforcing |
| MTA-STS | TXT at _mta-sts.your domain | v=STSv1; id=20240101 | Record without the policy file |
| TLS-RPT | TXT at _smtp._tls.your domain | v=TLSRPTv1; rua=mailto:… | Rarely set, optional |
Find out in plain words why invoices and newsletters go to spam.
Check a sending domain before a Klaviyo, Mailchimp or HubSpot campaign.
Audit a client’s domain and hand over the records to fix.
Count SPF lookups and plan a safe move to DMARC reject.
33 free tools for tracking, analytics, advertising and SEO. No login needed.
See every GTM tag, trigger and variable, plus GA4 events, parameters and Consent Mode.
Open the tracking audit →Preview how a page looks on Google, Facebook, LinkedIn and X, and fix its Open Graph tags.
Open the preview checker →Find out if a site uses server-side GTM, a first-party loader and Conversions API.
Open the server-side checker →See whether ChatGPT, Claude, Perplexity and Google AI crawlers may read your site, and build llms.txt.
Open the AI crawler checker →Hear from our clients. Loved by 600+ businesses worldwide.
“I had an excellent experience working with MD on my Google Ads account. Everything was set up perfectly and worked smoothly without any issues or troubleshooting needed. His expertise and attention to detail made the whole process effortless.”
“I worked with Niamul on multiple Google Analytics projects and was impressed by his expertise and precision. He has a strong grasp of tracking, reporting, and optimization, always ensuring accurate insights. He is proactive, reliable, and easy to collaborate with.”
“MD Niamul is extremely skilled. He fixed my Shopify, Google Analytics, and Google Ads conversion tracking perfectly. Everything works exactly as it should now, and he even added an extra data layer, which was very helpful. Outstanding service, fast delivery, and highly recommended.”
“Reliable, knowledgeable, and truly trustworthy. I’ve been working with Niamul for over a year, and he consistently delivers exceptional results across all analytics tasks. His expertise, communication, and commitment make him my go-to specialist for tracking, measurement, and data accuracy.”
“MD N delivered flawless Meta Pixel, CAPI, and server-side tracking. He understood our goals quickly, explained everything clearly, and ensured full transparency. Communication was smooth, updates were consistent, and the results improved our data accuracy and ad performance.”
Five-star reviews from businesses and agencies in the USA, Canada, UK and Australia.
Read All ReviewsYes. It is free with no login. You can download the results as an Excel file or email them to yourself.
A common cause is missing or broken email authentication: no SPF, no DKIM signature or no DMARC record. This tool checks those. Spam placement also depends on your content, your sending history and complaints, which a DNS check cannot see.
SPF allows at most 10 DNS lookups per check. Each include, a, mx, exists and redirect counts, including the ones nested inside an include. Over the limit, SPF fails for all your mail. The SPF tab shows what each include costs.
No. A domain may have only one record starting with v=spf1. With two, receivers return an error. Merge every sender into one record. The tool writes a merged starting point for you.
Not necessarily. DNS cannot list DKIM selectors, so the tool tries 62 common ones. Find yours by opening a sent email, viewing the original message and reading the “s=” value in the DKIM-Signature line, then enter it and check again.
Start with p=none and a report address so you can see who sends as you. When your real mail passes, move to quarantine, then reject. Reject gives full protection against people faking your domain.
The Overview tab shows whether you meet the DNS part: SPF and DKIM published and a DMARC record of at least p=none. The rules also cover alignment, one-click unsubscribe and spam rates, which this tool does not check.
Only the domain name is looked up, through Google or Cloudflare public DNS from your browser. If you type an email address, the part before the @ is not sent. Our server keeps a simple log of the domain checked and the result. Your email address is saved only if you ask for the report by email.
No. It means your DNS records are in good order. Delivery also depends on your content, list quality, sending volume and reputation.
I am MD Niamul, a conversion tracking and web analytics specialist and an official Stape partner. I connect email platforms such as Klaviyo and HubSpot to GA4 and your ad accounts, so you can see the revenue every campaign brings in.