How to Check DNS Records for Email Deliverability

How to Check DNS Records for Email Deliverability

Checking your DNS records is essential for ensuring your emails reach the inbox. DNS records like SPF, DKIM, and DMARC authenticate your emails and tell receiving servers that your messages are legitimate. Without proper DNS configuration, your emails may be rejected or filtered into spam folders.

Quick Answer

To check your DNS records for email deliverability, use MailMoxie's free DNS Record Checker tool. Enter your domain name, and the tool will instantly display your SPF, DKIM, DMARC, and MX records along with any errors or warnings. This helps you identify authentication issues before they impact your email delivery.

Why Check DNS Records?

DNS records are the foundation of email authentication. When you check them regularly, you can:

• Prevent spam filtering: Proper authentication reduces the chance your emails land in spam
• Protect your domain: DNS records prevent others from spoofing your domain
• Improve deliverability: Receiving servers trust authenticated emails more
• Identify problems early: Catch misconfigurations before they affect campaigns
• Monitor changes: Track when records are modified or expire

Step-by-Step: How to Check Your DNS Records

Step 1: Use MailMoxie's DNS Record Checker

Visit MailMoxie's DNS Record Checker tool. This free tool provides instant analysis of your DNS configuration without requiring any login or signup.

Step 2: Enter Your Domain

Type your domain name (e.g., yourdomain.com) into the search field. Don't include www or http://—just the domain name itself.

Step 3: Review Your Results

The tool will display:

• SPF Record: Shows which servers are authorized to send email for your domain
• DKIM Record: Displays your email signing keys and verification status
• DMARC Record: Shows your policy settings and reporting configuration
• MX Records: Lists your mail exchange servers for receiving email
• A/AAAA Records: Basic domain resolution records

Step 4: Interpret the Results

Look for these indicators:

• ✅ Green checkmarks: Records are properly configured
• ⚠️ Yellow warnings: Potential issues that should be addressed
• ❌ Red errors: Critical problems that need immediate attention
• Missing records: If a record doesn't appear, it may not be configured

Step 5: Address Any Issues

If the tool identifies problems:

1. Note the specific error or warning message
2. Log into your DNS provider's dashboard (where you manage your domain)
3. Add or modify the DNS records as recommended
4. Wait for DNS propagation (usually 1-4 hours, up to 48 hours)
5. Re-check your records to verify the fix

What to Look For in Your DNS Records

SPF Record

Your SPF record should:

• Start with v=spf1
• Include all services that send email for your domain (e.g., include:_spf.google.com)
• End with a policy like ~all (soft fail) or -all (hard fail)
• Not exceed 255 characters (use SPF flattening if needed)

Example of a good SPF record:

v=spf1 include:_spf.google.com include:servers.mcsv.net ~all

DKIM Record

Your DKIM record should:

• Be located at a subdomain like selector1._domainkey.yourdomain.com
• Contain a valid public key
• Match the selector used by your email service provider
• Show as "pass" when verified

DMARC Record

Your DMARC record should:

• Be located at _dmarc.yourdomain.com
• Start with v=DMARC1
• Include a policy: p=none (monitor), p=quarantine (treat as suspicious), or p=reject (reject)
• Include a reporting address: rua=mailto:dmarc@yourdomain.com

Example of a good DMARC record:

v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com; ruf=mailto:dmarc@yourdomain.com; fo=1

MX Records

Your MX records should:

• Point to your email service provider's mail servers
• Have appropriate priority values (lower numbers = higher priority)
• Include backup servers for redundancy

Alternative Methods to Check DNS Records

Using Command Line Tools

You can also check DNS records using command-line tools:

Check SPF record:

nslookup -type=TXT yourdomain.com

Check DMARC record:

nslookup -type=TXT _dmarc.yourdomain.com

Check MX records:

nslookup -type=MX yourdomain.com

Using Online DNS Lookup Tools

Other free tools you can use:

• MXToolbox
• DNS Checker
• Google Admin Toolbox

However, MailMoxie's DNS Record Checker is specifically designed for email deliverability and provides actionable recommendations.

How Often Should You Check DNS Records?

Check your DNS records:

• After making changes: Verify immediately after adding or modifying records
• When setting up a new domain: Ensure all records are configured correctly
• When changing email providers: Update records to match new services
• If you notice deliverability issues: DNS problems often cause delivery failures
• Quarterly maintenance: Regular checks catch issues before they become problems

Common Questions

Q: How long do DNS changes take to propagate?

A: DNS changes typically take 1-4 hours to propagate globally, but can take up to 48 hours. Most changes are visible within a few hours. Wait for full propagation before testing.

Q: Can I have multiple SPF records?

A: No, you should only have one SPF record per domain. Multiple SPF records will cause authentication failures. If you need to authorize multiple services, combine them in a single record using multiple include: statements.

Q: What if my DNS records are missing?

A: Missing DNS records mean your emails aren't properly authenticated. Add the missing records through your DNS provider's dashboard. MailMoxie's DNS Record Checker will show you exactly what records you need to add.

Q: Do I need all DNS records (SPF, DKIM, DMARC)?

A: While you can send email with just SPF, having all three (SPF, DKIM, and DMARC) provides the best protection and deliverability. DMARC requires either SPF or DKIM to pass, and having both provides redundancy.

Q: How do I know if my DNS records are working?

A: After checking your records, send a test email to your MailMoxie agent address. The deliverability report will show whether your authentication records are passing. You can also check DMARC reports from receiving servers.

Q: What's the difference between SPF, DKIM, and DMARC?

A: SPF authorizes which servers can send email for your domain. DKIM adds a digital signature to prove emails haven't been tampered with. DMARC tells receiving servers what to do with emails that fail SPF or DKIM checks and provides reporting.

Key Takeaways

• Use MailMoxie's free DNS Record Checker to quickly verify your DNS configuration
• Check SPF, DKIM, DMARC, and MX records for complete email authentication
• Address any errors or warnings immediately to prevent deliverability issues
• Re-check records after making changes and wait for DNS propagation
• Regular DNS record checks help maintain good email deliverability over time
• Proper DNS configuration is essential for inbox placement and brand protection