Free email
deliverability tools.
Check SPF, DKIM, DMARC and DNS records. Understand what the results mean, find your next step, and build a professional email signature.
Your email setup,
in plain English.
A missing enquiry, an undelivered proposal, or an impersonated domain can disrupt a real business relationship. These free email deliverability tools help you investigate the public records behind your email—and understand the next question to ask.
Choose the right input.
Use your sending domain for SPF and DMARC, your provider’s selector for DKIM, and the sending server’s public IP for reverse DNS. Your website’s IP may be different.
Read the finding.
“Record found” means the lookup returned a public record. It does not establish that a real email passed authentication or reached the inbox. An unavailable lookup is an unknown result.
Verify the change.
Compare findings with your provider’s setup instructions. After an authorized administrator updates DNS, allow caches to expire, rerun the check and examine a new test message.
Free SPF checker
SPF is your domain’s approved-sender list. It publishes which systems may send for the domain used in an email’s envelope sender. Check it when adding a mailbox provider, CRM, newsletter platform or website mail service.
How to run the check
Enter the domain your provider tells you to authenticate, without a person’s name or an email address. The checker reads its public TXT records and identifies SPF policies.
Understand the result & next steps
- One record found
- Compare its senders with every service you actually use. This tool does not recursively evaluate included policies or count the full chain of DNS lookups.
- Missing or multiple policies
- Ask your email administrator to review the setup. A domain should not publish multiple SPF policies; consolidate legitimate senders into the provider-approved policy.
- Includes
+all - This authorizes any sending IP. Review it rather than copying a replacement record from an unrelated business.
SPF has a limit of ten DNS-lookup-causing terms during evaluation. A record can exist and still fail that evaluation.
Free DKIM checker
DKIM lets a receiving server check a message’s digital signature. Your sending service keeps the private signing key; a public key is made available through DNS. Use this check when enabling email signing or changing providers.
Find your selector first
Enter your domain and the selector supplied by your provider. In a signed message’s DKIM-Signature header, s= identifies the selector and d= identifies the signing domain. “google” is a common Google Workspace selector, not a universal default.
Understand the result & next steps
- Key found
- A public key is available at that selector. Send a real message and inspect its authentication results to verify signing and validation.
- No key returned
- Confirm the selector and signing domain with your provider. Another selector may be active; one missing selector does not prove DKIM is disabled.
Never paste a private signing key into a public checker. This tool looks up the published key; it does not verify a message signature.
Free DMARC checker
DMARC connects authentication to the domain people see in the From address. An SPF or DKIM pass must also align with that domain. The published policy asks receivers how to treat messages that fail DMARC.
When this check is useful
Run it when reviewing domain impersonation protection or introducing a new sender. Enter the sending domain; the tool looks for a TXT policy at _dmarc.yourdomain.com.
Understand the result & next steps
p=none- Monitoring policy: DMARC itself requests no enforcement action. This is not a promise of inbox delivery.
p=quarantineorp=reject- The domain requests stricter handling of messages that fail. Confirm legitimate senders authenticate and align before tightening the policy.
- Missing or multiple records
- Review the policy with your administrator. A valid policy and a reporting plan help make the rollout reviewable.
A rua= destination can receive aggregate reports. Begin with monitoring, identify legitimate senders and review reports before moving to enforcement.
Free DNS lookup
DNS publishes where services for a domain can be found. Choose MX to review incoming mail routing, TXT for published verification and authentication text, A or AAAA for IP addresses, or NS for nameservers.
Use it to investigate a change
Enter the exact domain or hostname and select the record type. Compare the returned name and value with your provider’s instructions. TTL is the time a resolver may cache a response.
Understand the result & next steps
An MX record shows mail routing; it does not prove that a particular mailbox exists. A website’s A record does not identify every server that sends its email.
No records may mean the name or type is wrong, or nothing is published there. A resolver error is different. Confirm the hostname before changing DNS, preserve the old values and retest after caches expire.
Free CNAME lookup
A CNAME points one hostname to another hostname. Email providers may use aliases for verification, branded links or DKIM configuration. Check the exact host your provider supplies, such as selector1._domainkey.example.com.
Compare the target precisely
Enter that full hostname, then compare the result with the provider’s expected destination. Looking up the root domain can miss a record published on a subdomain.
Understand the result & next steps
A returned target confirms an alias was found. This lookup does not certify the provider’s entire setup. No CNAME response is not automatically an error: another record type or a DNS provider’s flattening behavior may be involved. Check your provider’s instructions before making changes.
Free reverse DNS lookup
Reverse DNS maps a public IP address to a hostname using a PTR record. This is relevant when investigating the infrastructure that actually sends your mail.
Use the sending IP, not a guess
Get the outbound server’s public IP from a message header or your email provider. Enter it here. For hosted email, the provider normally controls this setup rather than your website designer.
Understand the result & next steps
If a PTR hostname is returned, check that its A or AAAA record resolves back to the sending IP. This tool returns PTR records only; it does not perform that forward-confirmation step.
If no PTR is returned, ask the IP owner or mail provider to review it. Changing your website’s DNS may have no effect on the outgoing mail server.
Email blocklist & reputation checks
A reputation investigation needs the right domain, IP and receiving service. Our blocklist tool opens independent lookup services. It does not run a comprehensive automated scan or issue a “clean” verdict.
Start with a real delivery problem
Save the bounce or rejection message. Identify the sending IP or domain it mentions, then check the service named in that response. Different lists have different purposes and listing criteria.
Understand the result & next steps
If a service reports a listing, read its explanation and removal process. Resolve the underlying issue with your provider before requesting removal. A shared sending IP may require the provider’s involvement.
No listing in one database is not a universal reputation pass. Gmail Postmaster Tools can help domain owners review available sending data; it is not a public blocklist checker.
Free email signature generator
Make it easy to recognize you and find the next contact route. Create a text-led signature with your name, role, business, email, phone and website. Our generator uses no external images or tracking pixels.
Create, copy and test
Enter only details you want recipients to see. Copy the signature into Gmail’s signature settings, choose the appropriate defaults and send yourself a test. Review it on mobile and in a reply thread.
If copying or formatting looks wrong
Use Copy HTML to access the generated markup, or copy the rendered preview with your editor’s supported controls. Pasting raw HTML into Gmail’s visual signature box will show code, so use the rendered version there.
Check every link after pasting. The generator does not store entries or update your mailbox settings. A polished signature supports a clear identity; it does not authenticate email or guarantee delivery.
Email deliverability questions, answered.
Will passing these checks keep my emails out of spam?
No. These lookups examine published records, not inbox placement. Receivers also consider reputation, recipient feedback and message behavior. Verify authentication on actual messages and monitor real delivery outcomes.
What is the difference between SPF, DKIM and DMARC?
SPF covers authorized sending infrastructure, DKIM validates a message’s signature, and DMARC ties authentication to the visible From domain and publishes a handling policy. They work together; one lookup cannot replace the others.
Can I check a domain without access to its mailbox?
Yes. Public DNS lookups need no mailbox password or account connection. Changing a record requires authorized access to the DNS provider. The signature generator runs in your browser.
Why does a record show up here but my provider says it is missing?
Confirm the exact hostname, record type, DKIM selector and expected value. Cached answers and provider validation timing can differ. Save the result and check again after the relevant TTL; ask your provider if the mismatch remains.
Should I check my website domain or my sending subdomain?
Check the domains your email service uses. A message can have different visible From, envelope-sender and DKIM signing domains. Your provider’s setup instructions and message headers identify the records to review.
Are these tools free, and do they change my DNS?
The tools on this page are free to use without an account. Lookups read public records; they do not change DNS, connect to your mailbox or send test messages. Reputation resources open separate services with their own availability and terms.
Does the blocklist tool scan every email blocklist?
No. It provides links to independent reputation services. Review the service named in a real rejection message and the specific sending IP or domain involved.
Let’s build something better.
Make website enquiries, business email and customer follow-up work together. We build websites, custom CRMs, integrations and automation around your workflow.