en
PortuguêsEspañolEnglishFrançaisDeutschItaliano

Free SPF and DMARC checker

See what public DNS publishes for the domain that sends your email. This tool displays SPF and DMARC records in your browser and distinguishes a published record from a missing or ambiguous configuration. It sends no messages and changes no DNS settings.

· ILOVEDIGITAL Studio

Look up SPF and DMARC

Enter a domain only, for example ilovedigital.eu. No URL, email address or credentials.

The lookup starts only when you press the button. Your browser sends the domain and your IP address to Google Public DNS to retrieve the records. ILOVEDIGITAL does not store the entered domain, ask for your email or subscribe you to messages. Queries send neither referring-page information nor credentials; client-subnet sharing is disabled. Read the resolver’s privacy policy before proceeding. Google Public DNS privacy.

What does SPF check?

SPF describes which servers may send mail for a domain in a TXT record beginning with v=spf1. A recipient evaluates it against the sending server’s IP address and the envelope sender domain. Finding a record does not prove that your sending service is authorised: its real sending sources must match the published mechanisms and includes.

What does DMARC mean?

DMARC connects authentication to the domain visible in the From header. Its record is normally published at _dmarc.example.com. The policies p=none, p=quarantine and p=reject request monitoring, quarantine or rejection of messages that fail DMARC evaluation. A policy alone does not prove alignment; that requires an actual message and its SPF or DKIM results.

Reading the result

More than one SPF record requires review: authorised sources normally belong in a single record. Multiple DMARC records also need attention. The none policy allows monitoring before tightening enforcement. Do not switch straight to reject without identifying every service that sends on the company’s behalf, because legitimate messages may be affected.

What this tool does not test

We query TXT records at the exact domain and its _dmarc name. We do not expand include or redirect, calculate the full SPF lookup limit, discover inherited organisational-domain DMARC policies, or check DKIM. No direct record on a subdomain does not prove there is no applicable parent policy. We do not test delivery, blocklists or sender reputation.

If WordPress email still does not arrive

First check whether the application created the message and whether its provider accepted it. Compare the From address, envelope sender and Authentication-Results headers of a test message. Review recipients, bounces and spam filtering. DNS authentication and delivery are different stages: an authenticated email can still be rejected, filtered or never generated by the website.

WordPress email diagnosis