Free Email Health Check: MX, SPF, DKIM, and DMARC in One Report
Free tools<br>Email health check<br>Run the four checks that decide whether a domain's email works: MX, SPF, DKIM, and DMARC. One report, one verdict. Free, no signup.<br>DomainRun the checks
What this checks<br>Four DNS records decide whether a domain can receive email and whether the email it sends is trusted. MX records route incoming mail. SPF lists the servers allowed to send for the domain. DKIM publishes the keys that sign outgoing mail. DMARC tells receivers what to do when a message fails those checks.<br>This report runs all four lookups at once and rolls them into one verdict. Each section links to the full checker for that record when you need the detail.
How to read the verdict<br>A problem on MX, SPF, or DMARC is worth fixing this week: missing MX means bounced mail, a broken SPF record hurts every message you send, and no DMARC policy leaves the domain open to spoofing.<br>A DKIM warning from this report is softer. The scan only probes common selector names, so a domain that signs mail under a custom selector shows as not found here. If you know your selector, run the DKIM checker directly with it.
Shipmail<br>Set up once, monitored forever.<br>Shipmail configures MX, SPF, DKIM, and DMARC automatically when you connect a domain, then keeps watching them so a broken record never becomes a silent outage. Email on your own domain from $4 a month.<br>Get your domain set upSee pricing
More free tools<br>MX record lookupSPF record checkerDKIM record checkerDMARC record checkerGoogle Workspace cost calculatorEmail migration planner
FAQ<br>Questions worth answering.<br>What the combined email health report covers and how to act on it.
Is this the same as an email deliverability test?It covers the DNS half. Deliverability also depends on sender reputation and content, but broken MX, SPF, DKIM, or DMARC records are the most common and most fixable causes of mail landing in spam.<br>Why does DKIM show a warning when my mail works fine?The combined report can only probe common selector names like google or selector1. Providers with account-specific selectors will not be found this way. Run the DKIM checker with your exact selector for a definitive answer.<br>What should a healthy domain look like?MX records pointing at one provider, a single SPF record ending in ~all or -all within the 10 lookup limit, at least one strong DKIM key, and a DMARC policy of quarantine or reject with a rua reporting address.<br>How often should I run this?After any DNS change, after adding or removing an email sending service, and once a quarter as a habit. Records break silently, usually during unrelated DNS edits.