SPF checker
Whether your domain publishes a single SPF TXT record listing which services may send email as you. SPF helps inbox providers reject messages from servers that are not authorized to use your domain.
Free email deliverability audit
SPF, DKIM & DMARC checker for domain email health — brand trust
Run a free email deliverability audit on any domain. Get an instant Brand Trust report plus SPF, DKIM, DMARC, and BIMI results in plain English — no sysadmin jargon.
Email health checker
What we check — and how we help you fix it
Every scan shows what's working, what's missing, and the exact steps to fix it.
Inbox delivery
Will your mail land in the inbox, not spam?
What we check
Sender policy (SPF)
How we solve it
We read your current DNS record and give you the exact TXT value to copy and paste.
What we check
Mail routing (MX)
How we solve it
We flag missing or misconfigured mail routing and explain what to set at your DNS provider.
What we check
Encrypted delivery (TLS)
How we solve it
We check whether your mail servers accept encrypted delivery and tell you what to fix.
What we check
Secure website (HTTPS)
How we solve it
We confirm your site loads over HTTPS and note certificate or redirect issues.
Anti-spoofing
Can receivers spot fake email from your domain?
What we check
Message signing (DKIM)
How we solve it
We show whether signing is set up and walk you through enabling it with your email provider.
What we check
Impersonation policy (DMARC)
How we solve it
We generate the policy record you need and help you tighten it over time.
Inbox logo
Can your logo show beside messages in Gmail and others?
What we check
Logo DNS record (BIMI)
How we solve it
After you upload your logo, we give you the DNS record to publish at your provider.
What we check
Hosted logo file
How we solve it
Upload your logo on Tailnote — we convert it to the format inboxes expect.
What we check
Certificate readiness (optional)
How we solve it
We explain when a certificate is optional and when Gmail may require one.
Free scan · No DNS changes required to start
Brand trust report
A three-pillar evaluation of Inbox Delivery, Anti-Spoofing, and Inbox Logo readiness.
Deliverability audit
Seven checks across authentication, routing, and TLS — the same signals inbox providers weigh.
Plain-English fixes
Business-friendly explanations plus DNS records you can copy to your provider.
Free SPF, DKIM, DMARC & BIMI checkers
Each checker validates live DNS and configuration for your domain — no account required.
DKIM checker
Whether DKIM public keys are published so receivers can verify message signatures. DKIM proves messages were not altered in transit and strengthens alignment with DMARC.
DMARC checker
Whether a DMARC policy exists at _dmarc.yourdomain and how strictly failing mail is handled. DMARC is the main control against domain impersonation and phishing using your brand.
BIMI checker
Whether a BIMI record and logo URL exist for inbox brand display (optional for deliverability). BIMI can show your logo in supporting inboxes. It does not block core email delivery when missing.
Email deliverability audit
Every scan is a full email deliverability audit: we test SPF, DKIM, DMARC, BIMI, mail routing (MX), SMTP TLS, and HTTPS — then roll results into one domain email health report. Enter your domain above to start.
What we check — and how we help you fix it
Your domain brand trust report is broken down into three pillars. Each pillar aggregates multiple technical checks into simple, actionable guidance.
Inbox delivery
Will your mail land in the inbox, not spam?
What we check
Sender policy (SPF)
How we solve it
We read your current DNS record and give you the exact TXT value to copy and paste.
What we check
Mail routing (MX)
How we solve it
We flag missing or misconfigured mail routing and explain what to set at your DNS provider.
What we check
Encrypted delivery (TLS)
How we solve it
We check whether your mail servers accept encrypted delivery and tell you what to fix.
What we check
Secure website (HTTPS)
How we solve it
We confirm your site loads over HTTPS and note certificate or redirect issues.
Anti-spoofing
Can receivers spot fake email from your domain?
What we check
Message signing (DKIM)
How we solve it
We show whether signing is set up and walk you through enabling it with your email provider.
What we check
Impersonation policy (DMARC)
How we solve it
We generate the policy record you need and help you tighten it over time.
Inbox logo
Can your logo show beside messages in Gmail and others?
What we check
Logo DNS record (BIMI)
How we solve it
After you upload your logo, we give you the DNS record to publish at your provider.
What we check
Hosted logo file
How we solve it
Upload your logo on Tailnote — we convert it to the format inboxes expect.
What we check
Certificate readiness (optional)
How we solve it
We explain when a certificate is optional and when Gmail may require one.
Common questions
- What does the Tailnote Email Health check analyze?
- We review SPF, DKIM, DMARC, BIMI, MX mail routing, SMTP TLS support, and HTTPS configuration — the core signals that affect whether your domain looks trustworthy in inboxes.
- Why are my emails going to spam?
- Spam placement often comes from weak authentication (missing SPF, DKIM, or DMARC), poor sender reputation, or content triggers — not a single DNS record. Run a free scan to see which trust signals fail on your domain, then fix SPF, DKIM, and DMARC first before changing email copy or volume.
- How does the email trust score work?
- Your email trust score is a 0–100 rollup of seven checks: SPF, DKIM, DMARC, BIMI, MX routing, SMTP TLS, and HTTPS. Each category earns full, partial, or no points based on pass, warn, or fail — giving you one number for domain email health.
- Is this SPF, DKIM, and DMARC checker free?
- Yes. The SPF checker, DKIM checker, DMARC checker, and BIMI checker are free for any public domain. Results cache for about 24 hours; use Rescan anytime for a fresh email deliverability audit.
- What is an email deliverability audit?
- An email deliverability audit reviews the DNS and server settings inbox providers use to trust your mail. Our audit checks authentication (SPF, DKIM, DMARC), optional branding (BIMI), routing (MX), encryption (TLS), and HTTPS — then explains fixes in plain English.
- Do I need BIMI for deliverability?
- No. BIMI is optional branding (logo display in some inboxes). Missing BIMI does not block delivery, but a BIMI checker helps you see whether a record and logo URL are configured correctly.
- Is this tool free?
- Yes. You can scan any public domain for free. Results are cached for about 24 hours; use Rescan anytime for a fresh check.
- How often should I rescan my domain?
- After you change DNS or email providers, run a new scan. Otherwise a weekly check is enough for most small teams.
- Does a low score mean my emails go to spam?
- Not always — but missing DMARC or SPF often hurts trust. Use the recommended fixes below each issue to improve deliverability and reduce impersonation risk.