SPF, DKIM & DMARC Checker: Verify Email Authentication

SPF, DKIM and DMARC are the three pillars of email authentication. If any one fails, your deliverability suffers. Here is how to check all three.

What each record does

RecordPurposeWhat breaks if missing
SPFLists which IPs can send for your domainProviders cannot verify your sending server is authorized
DKIMCryptographic signature proving the email was not alteredMessages fail integrity checks and are more likely filtered
DMARCPolicy telling providers what to do when SPF/DKIM failNo enforcement; anyone can spoof your domain

How to check your records

Run a free GlockApps test to check your SPF, DKIM and DMARC alongside inbox placement.

Run free test

Common misconfigurations

Evidence & transparency. Checked against public data: RFC specifications for SPF, DKIM and DMARC. Not independently tested by us: provider-specific enforcement behavior. Reader should verify: your own DNS records using the tools above. Last reviewed: June 2026.

Frequently asked questions

Do I need all three (SPF, DKIM, DMARC)?
Yes. Each serves a different purpose. Gmail and Yahoo now require all three for bulk senders.
What happens if DMARC is set to p=none?
Providers monitor but do not enforce. Your domain is still vulnerable to spoofing. Move toward p=quarantine or p=reject as you gain confidence.

Keep reading

See where your emails really land

Run a free deliverability test with GlockApps and check your inbox placement across Gmail, Outlook and Yahoo, plus spam score and blocklist status.

Start with 2 free tests →