Domain Checker
Check all of your domain's email settings in one place - MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, DNSSEC and BIMI. For every problem you get a clear fix and why it matters.
About these results
This tool reads your domain's public DNS records (and the MTA-STS policy file) at the moment of the check and shows what it finds, with general best-practice guidance. Results reflect current public data and can be affected by DNS caching and propagation (changes may take up to 24-48 hours to appear). DKIM is checked against common selectors and any selector you provide - a "not found" result does not always mean DKIM is missing. Recommendations are general guidance, do not guarantee deliverability, and are not a substitute for your email provider's official setup instructions. We don't store the domains you check or send anything on your behalf.Focused checks
SPF check
Which servers may send as your domain.
DKIM check
The signature that proves your mail is genuine.
DMARC check
Your anti-spoofing policy and reporting.
MX lookup
The mail servers that receive your email.
MTA-STS check
Enforced TLS delivery to your servers.
TLS-RPT check
Reports about TLS delivery problems.
DNSSEC check
Signed DNS that can't be tampered with.
BIMI check
Your brand logo in the inbox.
What this domain checker looks at
- MX - the mail servers that receive email for your domain.
- SPF - which servers are allowed to send mail as your domain.
- DKIM - a cryptographic signature proving mail really came from you and wasn't altered.
- DMARC - ties SPF and DKIM together and tells receivers what to do with mail that fails.
- MTA-STS & TLS-RPT - enforce and monitor encrypted (TLS) delivery to your servers.
- DNSSEC - protects your DNS records from tampering.
- BIMI - shows your brand logo next to your mail once DMARC is enforced.
To verify individual email addresses, try the email checker.