Two SPF records
Adding a second TXT record for a new tool instead of one include in the existing record. SPF then fails for everything.
Tools · 30 seconds
Email deliverability test
Will your email reach the inbox? Test SPF, DKIM, DMARC and MX at once and get the exact fix for anything that fails.
Runs in your browser · public DNS records only · nothing stored
Three records decide if your email is trusted
SPF lists the servers allowed to send for your domain. DKIM adds a signature to every email. DMARC tells inbox providers what to do when a message fails, and where to send reports. MX records, the fourth check, decide where replies arrive.
Since February 2024 Google and Yahoo require every sender to pass SPF or DKIM, and bulk senders (about 5,000 emails a day to Gmail) to have all three. Cold email teams reach that volume quickly across mailboxes, so treat the bulk rules as the standard.
How to read the result
- PassThe record exists and follows the rules.
- ImproveIt works, but leaves a gap: DMARC in monitor mode, a short DKIM key, no reports.
- FixMissing or broken. Email is likely to land in spam or be rejected.
- CheckDKIM was not found under 36 common selectors. Find yours in an email header and check again.
The five mistakes we see most
DKIM only on the mailbox
DKIM is on in Google Workspace, but not in the newsletter or sequencing tool that also sends as you.
DMARC stuck at p=none
Fine for a month. After that it protects nobody from people pretending to be you.
Cold email from the main domain
If it lands in spam, invoices and customer replies can follow. Use a separate sending domain.
No MX on the sending domain
Prospects reply and the reply bounces. Point MX at your mailbox provider.
Gmail and Yahoo sender rules
What inbox providers require since February 2024
Bulk senders send about 5,000 or more emails a day to Gmail. Cold email teams reach that quickly across mailboxes, so treat the bulk rules as the standard.
Source: Google email sender guidelines
| Rule | Who | Requirement |
|---|---|---|
| SPF or DKIM | All senders | Required |
| SPF and DKIM | Bulk senders | Required |
| DMARC, p=none or stronger | Bulk senders | Required |
| From domain aligned with SPF or DKIM | Bulk senders | Required |
| One-click unsubscribe | Bulk senders, marketing email | Required |
| Spam complaint rate | All senders | Below 0.3 percent |
Questions people ask
What are SPF, DKIM and DMARC?
Three public DNS records that prove an email really comes from your domain. SPF lists the servers allowed to send for you, DKIM signs every email, and DMARC sets the policy for email that fails and where reports go.
Do I need all three?
Yes, if you send at any volume. Since February 2024 Google and Yahoo require SPF or DKIM from every sender, and SPF, DKIM and DMARC from bulk senders. Cold email without all three usually lands in spam.
How long until DNS changes show?
Usually minutes, sometimes up to an hour, rarely up to 48 hours. The time depends on the TTL your DNS host sets. Run the check again after publishing.
Can I share the result?
Yes. After a check the address bar holds a link with the domain, so a colleague or your IT provider sees the same live result.
Is my domain stored?
No. The check runs in your browser. Your browser asks Cloudflare’s public DNS service (or Google’s, as a fallback) for the domain’s public records, the same records every mail server reads. RevOps Lab does not receive or store the domain or the result.