TrueTier

← All tools

Trust & security · free tool

Email deliverability

Type your domain and see the three DNS records that decide whether your e-mail reaches the inbox: SPF (who may send for you), DKIM (a signature on each message) and DMARC (what receivers do when the first two fail). Each is checked for the classic mistakes, not just for existing.

20 of 20 free runs left this hour. Used them up? An extra run is $1.49 and works for every tool here, no account needed.

How it works

  1. We query the domain's DNS: the MX records, the TXT record with v=spf1, the _dmarc TXT record, and DKIM selectors that the big providers use.
  2. SPF is parsed for syntax, the 10-lookup limit, the all-mechanism and common typos.
  3. DMARC is parsed for the policy (none, quarantine, reject), alignment and reporting addresses.
  4. DKIM cannot be found without knowing the selector, so the usual ones are tried (google, default, selector1/2, k1, mail, dkim, s1/s2, mailo…); you can also paste your own.

Questions people ask

Why does my mail land in spam even though I have SPF?

Since 2024 Gmail and Yahoo require SPF and DKIM and a DMARC record for anyone sending in volume, and DMARC alignment — the domain in the From header must match the SPF or DKIM domain. A newsletter tool sending "on behalf of" you often breaks that.

What does p=none mean?

DMARC is monitoring only: receivers report failures to you but deliver the mail anyway. It is the right first step; after a few weeks of clean reports move to p=quarantine, then p=reject.

What is the 10 DNS lookup limit?

A receiving server will evaluate at most 10 include/a/mx/redirect lookups in your SPF record. Beyond that SPF returns "permerror" and fails silently. Every include of a SaaS tool adds one or more.

My DKIM was not found. Is it missing?

Maybe not — DKIM lives under a selector name that only your sending tool knows (e.g. selector1._domainkey). The tool tries the common ones; if yours is custom, type it into the selector field.

Do I need all three?

Yes for anything beyond personal mail. SPF alone breaks on forwarding, DKIM alone does not tell receivers what to do, DMARC without the other two rejects your own mail.

Free, no signup. Runs on our servers, nothing is installed. Want all of it at once? The full site check runs 30+ tests in one go.