How to check your SPF, DKIM and DMARC records (step by step)
Before sending cold email, verify all three records pass. Use an MX/auth lookup tool, send a test to a checker, and confirm DMARC alignment. Here's exactly how to check each one.
Short answer: before you send any cold email, confirm SPF, DKIM and DMARC all pass for your domain. Check SPF and DMARC with a DNS/MX lookup tool — they're public TXT records — check DKIM by sending a test to a checker and reading the signature result, and confirm DMARC alignment (the From domain matches the authenticated one). All three green is your entry ticket to the inbox; Gmail and Yahoo now effectively demand it from bulk senders.
How to check each
- SPF: look up the domain's TXT record (
v=spf1 …); confirm your sending service is authorised and there's one SPF record. - DKIM: send a test to a checker; confirm the message is DKIM-signed and verifies (look up the selector's TXT record).
- DMARC: look up
_dmarc.yourdomain.com; confirm a policy exists (v=DMARC1; p=…) and that SPF/DKIM align to your From domain.
Common failures
Two SPF records where only one is allowed, a missing DKIM selector, or a From domain that doesn't align with the authenticated one — that last one breaks DMARC.
Autocloz checks SPF, DKIM and DMARC on every connected domain and flags anything missing before you send a single email.
> Start free — connect a domain and get an instant auth health check.