SharkDNS guide
5 min read

SPF, DKIM, and DMARC checker guide

Verify the DNS policies that protect a domain from spoofing and improve mail delivery.

SPF checkerDKIM lookupDMARC checkeremail authentication

When to use it

Run a mail security check when messages land in spam, after changing mail providers, before a domain migration, or when auditing a domain for spoofing exposure.

What each protocol does

SPF lists authorized sending servers, DKIM signs messages with a domain key published in DNS, and DMARC tells receivers how to handle failures and where to send reports. MTA-STS and TLS-RPT add transport encryption policy and reporting.

Common problems found

The most frequent issues are SPF records exceeding the 10 DNS lookup limit, DMARC stuck at p=none, missing DKIM selectors, and multiple SPF records. Each check reports the exact warning so you can fix the record directly.