Skip to content
EssentialSecurity, theme, and saved preferences.Always on

We do not send your name or email to affiliates.

Specialist check

SPF DKIM DMARC checker for cold email

Run the three core authentication checks together before a cold email campaign goes live: SPF, DKIM, and DMARC.

Checks
Checks SPF and DMARC plus DKIM for the exact selector you provide.
Cannot tell
It does not check routing, links, listings, or the actual message path.

Example:

Required for a DKIM decision. Common examples: Google google, Microsoft 365 selector1 or selector2. Confirm the value in your sending provider.

Expected time: about 5 to 20 seconds. Some public services can take longer.

Source: Live Google Public DNS for SPF, DMARC, and the exact DKIM selector entered.

Questions

It checks the three authentication records receivers use to decide whether mail is allowed, signed, and covered by a domain policy. SPF lists approved senders, DKIM verifies the message signature, and DMARC tells receivers what to do when authentication fails.

DKIM records are published under a selector, such as google, selector1, s1, or a provider-specific value. The selector has to match the platform that will send the campaign, so a real DKIM check needs both the domain and selector.

No. Passing authentication is necessary, but it is not full launch signoff. A full check also covers MX, tracking-domain SSL, blacklist status, domain age, inbox setup, and Google/Yahoo sender requirements across the workspace.

Assign the record owner, fix the failing authentication record, and rerun the same checks with the selector and sending domain that will launch. Record the fresh result beside the client launch decision instead of relying on a one-time lookup.