Skip to content

Is your email setup actually configured?

Enter a domain. Get a scored DNS report on MX, SPF, DKIM, DMARC, and transport security: the records that decide whether your mail gets delivered and whether anyone can send as you.

Pure DNS lookups. No mail is sent, nothing is stored.

What this checks

MX

Whether mail to the domain has an explicit, redundant destination.

SPF

Which servers may send as the domain, the all-qualifier, and the 10-lookup limit.

DKIM

Probes ~20 common provider selectors for a published signing key.

DMARC

The policy, reporting address, and whether it actually enforces.

SPF, DKIM, or DMARC failing?

We fix the records, move enforcement up without losing mail, and wire deliverability checks into the systems you already run.

Questions about the Email Setup Check

What are SPF, DKIM, and DMARC?

SPF lists the servers allowed to send mail for your domain. DKIM signs each message with a key published in DNS. DMARC tells receivers what to do with a message that passes neither in alignment with your domain, and where to send reports. Together they stop others from sending mail in your name.

Why does the check not find my DKIM key?

DKIM keys live under a selector the mail provider chooses, and DNS cannot list them. The check probes 20 common selectors, covering Google Workspace, Microsoft 365, IONOS, Strato, Mailchimp, SendGrid, Postmark, and others. A miss means the key is not under a common name, not that DKIM is off.

What is the SPF 10-lookup limit?

Receivers stop evaluating SPF after 10 DNS lookups and return a permanent error, so the record fails for every message. Each include, a, mx, ptr, exists, and redirect costs a lookup, and nested includes count too. The check resolves the includes and estimates the total.

Which DMARC policy should I use?

Start with p=none and an rua reporting address. Read the reports until every legitimate sender passes, then move to p=quarantine and finally p=reject. Only quarantine and reject actually protect the domain.

What else does the check look at?

MX records and a fallback mail host, plus MTA-STS and TLS reporting, which enforce and monitor encrypted delivery of inbound mail. BIMI is shown for information.

From the blog

Contact

What eats your team's time?

Two or three sentences are enough. Philipp reads every message himself and usually replies within two business days.

Philipp Kant

Philipp Kant
Software & AI Architect, Krefeld

What is it about?

Opens your email app with the message to philipp@kant.dev, ready to send. You see everything before it goes out. Privacy policy

  • No sales call unless you ask for one.
  • No newsletter, no automated follow-ups.
  • Your message goes to one inbox: philipp@kant.dev.

Rather talk? Pick a 30-minute slot

Or write directly: philipp@kant.dev