Order confirmations, invoices, download links and quotes that never arrive usually come down to three DNS records: SPF, DKIM and DMARC. Gmail, Yahoo and Outlook.com now filter or reject mail when they are missing or broken. Check your domain free in 10 seconds.
Reads public DNS only, straight from your browser. Nothing is stored and no signup is needed.
We work out exactly what to change, tell you where to click, and re-check it until it passes. For one domain, delivered by email within 6 hours.
Secure card checkout through Whop. After paying, email inboxpass@appin60.com with your domain and the tools that send email for you. We don't need your passwords or DNS login: you make the changes, and we tell you exactly what to enter. Orders are taken until 2026-10-16 02:30 UTC.
A DNS change, a new email tool or a host migration can quietly break SPF or DMARC. We re-check your domain every day and email you only when something changes. It's free while in beta and will be $3/month later, and you'll be asked before any charge.
We use your email only for alerts about this domain. Unsubscribe by replying "stop".
| Mailbox | Rule |
|---|---|
| Gmail | Since February 2024: every sender needs SPF or DKIM. Senders of more than 5,000 messages a day need SPF, DKIM and DMARC. Unauthenticated mail gets rejected with error 550 5.7.26 or goes to spam. |
| Yahoo / AOL | The same requirements since February 2024. |
| Outlook.com / Hotmail | Since May 2025, high-volume senders without SPF, DKIM and DMARC are rejected with error 550 5.7.515. |
| Shopify | If your sender domain isn't authenticated, Shopify rewrites your sender address to store+123@shopifyemail.com. Gmail and Yahoo also need a DMARC record, which Shopify doesn't add for you. |
Sources: Google sender guidelines, Microsoft 550 5.7.515, Shopify: setting up your email.
It reads your SPF record and counts its DNS lookups, reads your DMARC policy, looks for DKIM keys under 35 common selectors, and spots Shopify stores whose sender domain isn't authenticated. DKIM selectors can't be listed from DNS. If you use a custom selector, open the headers of an email you sent (look for DKIM-Signature: s=) or let us check it as part of the Fix Plan.