Enter your domain and check at a glance whether SPF, DKIM and DMARC are correctly configured – for better email deliverability and protection against spoofing.
The DKIM selector is optional – without it, only SPF and DMARC are checked.
Here you'll find answers to the most common questions about our free email security check.
SPF, DKIM and DMARC are three complementary email authentication standards. SPF (Sender Policy Framework) specifies which servers are allowed to send email on behalf of a domain. DKIM (DomainKeys Identified Mail) digitally signs emails to prove they haven't been tampered with. DMARC (Domain-based Message Authentication) builds on both and specifies how email providers should handle messages that fail SPF or DKIM.
Major email providers like Gmail, Outlook or GMX check these three standards to distinguish genuine emails from forged ones. If they're missing or misconfigured, even legitimate emails are more likely to end up in the spam folder or be rejected outright. Correct configuration also protects your domain from being abused for phishing or spam.
The DKIM selector is a name under which the public DKIM key is stored in DNS, e.g. "default" or "mail". You'll usually find it in your email or hosting provider's DKIM settings, or in the "DKIM-Signature" header (the "s=" field) of an email that was already sent.
"p=none" means monitoring only, with no effect on delivery. "p=quarantine" instructs email providers to move suspicious emails to the spam folder. "p=reject" is the strictest setting and blocks delivery entirely for emails that fail SPF and DKIM. Many organizations start with "none" to gather data, then tighten the policy step by step.
At Speed-Net, you can easily create the relevant TXT records via DNS management in the customer portal. Our support team is happy to help with correct configuration, especially if you use several email services at once.
A domain may only have a single SPF TXT record. If you use several services, for example your own mail server, a newsletter tool and a CRM, their permissions need to be combined into this one record. Multiple separate SPF records are ignored by email providers or cause delivery problems.
Yes, you can run the check free of charge and without registration at any time, as often as you like.
No, the query is carried out exclusively in real time for display in your browser. Speed-Net does not permanently store the queried domains or DKIM selectors.