How to check SPF and DMARC records
Two public DNS records help receiving mail systems understand who may send for your domain and what to do when authentication fails. Here is how to check the basics without changing anything.
What a presence check tells you
SPF and DMARC records are published in DNS. That means a checker can look for them using only a domain name—no inbox login, website access, or DNS password required.
Finding both records is a useful baseline. It is not proof that the records are complete, aligned with your From address, or using an enforcement policy.
SPF and DMARC in one minute
Run the free check
- Use the domain after the @ in your business email, such as example.com.
- Enter only the domain—not a full email address or a page URL.
- Review whether SPF and DMARC were found, then read the boundaries below before making changes.
How to interpret the result
Both records found
This is a healthy starting point. A fuller audit should still review syntax, SPF lookups, DKIM, alignment, DMARC policy, reporting, and every legitimate sender.
One record missing
There is a visible gap, but the fix depends on what sends mail for the domain. Inventory those services before editing DNS.
Neither record found
Prioritize a careful review. Do not copy a generic record into DNS without identifying legitimate sending services and planning a staged rollout.
Frequently asked questions
What is an SPF record?
SPF is a public DNS record that lists which systems are allowed to send email for a domain. A presence check can find the record, but it cannot prove that every sender is included or configured correctly.
What is a DMARC record?
DMARC is a public DNS record that tells receiving mail systems how to handle messages that fail authentication and can provide reports to the domain owner.
Does finding SPF and DMARC guarantee inbox placement?
No. Inbox placement also depends on alignment, record syntax, policy strength, sender reputation, content, list quality, and the configuration of every sending service.
Can I check SPF and DMARC without logging in?
Yes. These records are published in DNS, so a basic presence check can read them without access to the domain or email account.
Should I change a DNS record immediately if one is missing?
Not without first identifying every legitimate sender. A rushed SPF or DMARC change can affect real mail, so use a staged plan and verify the services that send on the domain’s behalf.
Check the public baseline in about 30 seconds.
No account, no email address, and no DNS changes.
Run the free SPF & DMARC check →