Are your emails landing in spam?
Order confirmations, invoices and quotes that never arrive usually come down to three DNS records: SPF, DKIM and DMARC. Check yours and get the exact records to change.
Domain email check
How to fix what the check finds
Each result ends with the changes to make, in order, with the records to copy and where to click at your DNS host.
Check your domain
The check reads your SPF, DMARC and DKIM records and works out your mailbox provider and DNS host.
Change the records it lists
Copy each record into your DNS host. Edit an existing SPF or DMARC record rather than adding a second one.
Check again
DNS changes usually show within an hour. Run the check again after each change until everything passes.
For a worked example, see the fix steps for a real Shopify store: the DMARC record to add, where to click in Shopify, and how to set up DKIM for Google Workspace.
Get an alert if it breaks
A DNS change, a new email tool or a host migration can quietly break SPF or DMARC. The watch re-checks your domain every day and emails you only when something changes. It is free.
Paused for now: the daily re-checks are not running at the moment. You can still sign up, and your first email arrives when they restart.
Why this matters now
The big mailbox providers now filter or reject mail that is missing these records.
| Mailbox | Rule |
|---|---|
| Gmail | Since February 2024: every sender needs SPF or DKIM. Senders of more than 5,000 messages a day need SPF, DKIM and DMARC. Unauthenticated mail gets rejected with error 550 5.7.26 or goes to spam. |
| Yahoo / AOL | The same requirements since February 2024. |
| Outlook.com / Hotmail | Since May 2025, high-volume senders without SPF, DKIM and DMARC are rejected with error 550 5.7.515. |
| Shopify | If your sender domain isn't authenticated, Shopify rewrites your sender address to store+123@shopifyemail.com. Gmail and Yahoo also need a DMARC record, which Shopify doesn't add for you. |
Sources: Google sender guidelines, Microsoft 550 5.7.515, Shopify: setting up your email.
What the free check can and can't see
SPF
Reads your SPF record and counts its DNS lookups against the limit of 10, following every include.
DMARC
Reads your DMARC policy and whether it sends reports anywhere.
DKIM
Looks for keys under 35 common selectors. Selectors can't be listed from DNS, so a custom one may be missed.
Shopify
Spots Shopify stores whose sender domain isn't authenticated.
If you use a custom DKIM selector, open the headers of an email you sent and look for DKIM-Signature: s= to find it.