The three records that protect your email
SPF lists the servers allowed to send mail for your domain. DKIM adds a digital signature to each message. DMARC tells receivers what to do when a message fails both, and sends you reports.
Without them, your messages are more likely to land in spam and criminals can send convincing email that appears to come from you. Gmail and Yahoo now require them from bulk senders.
What this checker reports
It finds your SPF record and counts its DNS lookups (more than 10 breaks SPF), reads your DMARC policy, looks for DKIM keys under common selector names or the one you enter, and lists your mail servers.
Frequently asked questions
What is a DKIM selector?
A name your email provider chooses for the signing key, such as "google" or "selector1". Find it in your provider’s settings or in the headers of a message you sent.
What DMARC policy should I use?
Start with p=none to collect reports, then move to p=quarantine and finally p=reject once all your legitimate mail passes.
Why does SPF fail with too many lookups?
SPF allows at most 10 DNS lookups. Each include counts, and nested includes add up. Remove unused services or replace includes with fixed IP ranges.
Read-only: we request public pages the way a visitor would. Private and internal addresses are blocked, and nothing you enter is stored.
Want this running on every page, every day?
UrKavach monitors security, uptime, speed and SEO for every website you manage.