Xarma Logo Tools / Email Deliverability Checker
Feedback Back to Collection

DMARC & SPF Analyzer

Instantly evaluate SPF, DKIM, and DMARC settings for any domain in parallel using our free, premium auditor. Keep your emails out of the spam folder entirely with 100% free client-side scans.

Leave selector blank to Auto-Detect active setups (e.g., Google, Office 365, Mailchimp, SendGrid) across 14 standard prefixes.

Advertisement

Guide to SPF, DKIM, and DMARC Email Security

Why Email Authentication Matters Today

With major inbox providers like Google and Yahoo enforcing strict sender guidelines, having properly configured DMARC and SPF records is no longer optional. Incorrect records result in your marketing and transactional emails landing directly in spam folders. Our client-side analyzer queries active public DNS servers to instantly parse and validate your TXT records, pointing out potential vulnerabilities or duplicate entries.

Understanding SPF and DMARC

Sender Policy Framework (SPF) restricts which mail servers are permitted to send mail on behalf of your domain. Domain-based Message Authentication, Reporting, and Conformance (DMARC) instructs recipient servers on how to handle emails that fail SPF or DKIM authentication, enabling you to step up protection from monitoring ('none') to strict enforcement ('reject').

Frequently Asked Questions (FAQ)

What is the SPF 10-lookup limit error?

The SPF specification restricts domain validation to a maximum of 10 recursive DNS lookups to avoid exhausting resources on mail transfer agents. If your SPF record contains multiple nested include statements (e.g., Google, Mailchimp, HubSpot), you risk exceeding this limit, rendering SPF invalid.

How can I check DMARC alignment?

DMARC requires alignment between the 'From' header visible to users and the domains validated by SPF and DKIM. Our tool breaks down your records to help verify that your configuration aligns correctly.

Is my domain scanned securely?

Yes, our tool is 100% client-side. We query Google and Cloudflare secure DNS-over-HTTPS APIs from your browser, meaning we never store or cache your domain search queries or authentication details.