100% Client-Side DNS-over-HTTPS

SPF & DKIM Record Checker

Verify email authentication records directly from your browser. Analyze RFC 7208 SPF lookup limits, duplicate records, dangerous "+all" qualifiers, and DKIM public key bits.

Quick test live domains:
Domain & Selector Lookup
Encrypted browser query via Google / Cloudflare DNS-over-HTTPS without proxy servers.

Why SPF & DKIM Are Critical for Email Deliverability

1. The 10-Lookup SPF Ceiling (RFC 7208)

RFC 7208 imposes a strict ceiling of 10 DNS lookups when evaluating an SPF record. Nested includes from marketing platforms (Mailchimp, Klaviyo, Zendesk) quickly cascade beyond this limit, triggering silent PermErrors.

2. 2024 Google & Yahoo Inbound Mandates

Modern email security mandates require published SPF and DKIM authentication with at least 1024-bit (preferably 2048-bit) keys. Without them, commercial emails to Gmail and Yahoo recipients face aggressive spam-filtering.

Frequently Asked Questions

Clear, concise answers to common questions about Base64 decoding, encoding, and specifications.

It performs direct client-side DNS-over-HTTPS (DoH) lookups using Google Public DNS and Cloudflare DNS APIs over encrypted HTTPS, analyzing TXT records directly in your browser without proxy servers.