Free SPF, DKIM and DMARC checker
Find out why your emails land in spam. Then fix it.
MailVakt reads your domain’s public email settings, explains what’s wrong in plain English, and gives you the exact DNS records to paste.
- Read-only: public DNS lookups only
- We never send email as you
- Shareable report link
An illustration. Your report covers all eight checks, with fixes.
Safe to run on any domain
MailVakt only looks at what is already public. It never asks for your DNS login or your mailbox password.
Read-only by design
We read the same public DNS records every mail server reads. Nothing on your domain is changed.
Cross-checked answers
Every lookup goes to two independent public resolvers, Cloudflare and Google, and the answers are compared.
Fixes you can paste
Each problem comes with the exact record name and value, plus where to put it at your DNS provider.
No account needed
Checks are free and anonymous. Sign in only if you want ongoing DMARC report collection.
Eight checks, each in plain English
Every check answers one simple question. The technical detail is in the report when you or your IT person need it.
- MX
Can other servers find your inbox?
Your MX records tell the world which servers accept mail for you. Without them, replies bounce.
- SPF
Who is allowed to send as you?
The list of services permitted to send from your domain, checked against the 10-lookup limit.
- DKIM
Are your emails signed?
A digital signature that proves a message came from you and was not changed on the way.
- DMARC
What happens to fake emails?
Your policy tells inboxes whether to deliver, quarantine or reject mail that fails the checks.
- Alignment
Do signatures match your From address?
Major inboxes expect SPF or DKIM to match the domain your readers see. We check that they do.
- BIMI
Can inboxes show your logo?
An optional record that lets supporting inboxes show your brand next to your messages.
- MTA-STS
Is mail to you always encrypted?
Tells sending servers to require an encrypted connection when they deliver to you.
- TLS-RPT
Will you hear about delivery failures?
Gives servers an address to report failed encrypted deliveries, so you find out early.
Three ways to use MailVakt
Check a domain
Type a domain and get a graded report with copy-paste fixes. Free, and no account.
Check a domainTest a real email
Send a message to a one-time MailVakt address and see how it was authenticated on arrival: SPF, DKIM, DMARC and headers.
Start an inbox testAsk your AI assistant
In ChatGPT, Claude or Cursor, ask “why does my newsletter go to spam?” and MailVakt runs the checks for you.
Connect MailVaktWhy are my emails going to spam?
Answer one question about what you are seeing and go straight to the specific fix.
Start the guide