Store Email Deliverability Checker

Both providers publish their sender rules. The DNS parts are what this tool checks:

Pick your volume in the tool: under 5,000 a day, a missing DMARC record is a gap. Over it, it's a failure. Spam rate, unsubscribe headers and alignment happen in your email platform, not DNS, so check those there.

• SPF. The tool finds every v=spf1 record (there must be only one), then follows each include and counts the terms that trigger DNS lookups: include, a, mx, ptr, exists and redirect. RFC 7208 caps that at 10. Over 10, SPF fails for every email.
• DKIM. A DKIM key lives at selector._domainkey.yourdomain, and the selector can't be listed from DNS. The tool tries 30 common ones (google for Google Workspace, selector1 and selector2 for Microsoft 365, k2 and k3 for Mailchimp, s1 and s2 for SendGrid, Klaviyo's km1 and others). If none match, DKIM isn't confirmed either way: enter your selector.
• DMARC. It reads _dmarc.yourdomain and checks for one valid record, the policy, a report address (rua) and strict alignment.
• MX. It checks that replies can reach you, and spots Google Workspace or Microsoft 365 so it can tell whether SPF includes them.

1. 01

   Find your DKIM selector

   Open an email you sent in Gmail, choose Show original, and find s= in the DKIM-Signature line. Enter it in the tool to confirm the key.

2. 02

   Replace SPF with the corrected record

   Delete every existing v=spf1 TXT record on the root domain and add the one record the tool gives you.

3. 03

   Add or fix DMARC

   Add a TXT record named _dmarc with the starter record. Leave it at p=none while reports come in, then step up to quarantine and reject.

4. 04

   Set up your platform's records

   Shopify, Klaviyo and most email platforms authenticate with CNAME records they generate for you. Add those exactly as shown in the platform. For Shopify, use the Shopify email authentication checker.

On WooCommerce, order emails go out through your host's mail server unless you use an SMTP or email-sending plugin. Point it at a provider you've authenticated, or order emails may fail SPF and DKIM even with correct records.