Free email deliverability test for your domain
Find out whether your domain is set up to land in the inbox. We check the DNS records Gmail, Yahoo and Microsoft look at and give you paste-ready fixes.
What it checks
Everything the email deliverability check looks at
MX records
Confirms your domain has mail servers configured so it can receive email, including replies and bounces.
SPF record
Checks your SPF record exists and whether it ends in -all or ~all, which affects how strictly unauthorised senders are treated.
DKIM signing
Looks for DKIM keys on common selectors, which let receiving servers verify your messages were not altered.
DMARC policy
Reads your DMARC policy (none, quarantine or reject) and explains what it means for spoofed mail.
MTA-STS
Checks whether you require encrypted connections for mail delivered to your domain.
TLS-RPT
Looks for TLS reporting so you receive reports when encrypted delivery to your domain fails.
BIMI
Checks for a BIMI record, which can display your logo next to messages in supporting inboxes.
How it works
Three steps, about a minute.
-
1
Enter your domain or website
We use the domain to look up its mail-related DNS records.
-
2
We check authentication
MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT and BIMI are checked and explained.
-
3
Publish the fixes
Copy the suggested DNS records into your DNS provider and re-test.
What an email deliverability test checks
Email deliverability depends heavily on authentication: proof that a message really comes from your domain. An email deliverability test looks up the DNS records that provide that proof. SPF lists the servers allowed to send for your domain, DKIM adds a cryptographic signature to each message and DMARC tells receiving servers what to do when a message fails those checks. Supporting standards add further protection and trust: MTA-STS requires encrypted delivery, TLS-RPT reports problems with it and BIMI can display your logo in supporting inboxes. MakeItFlow checks all of these in one go, along with your MX records, and explains each result in plain language with the exact record to publish where something is missing.
Meeting Gmail, Yahoo and Microsoft sender requirements
Since 2024, Gmail and Yahoo have required bulk senders to authenticate with SPF and DKIM and publish a DMARC policy, and Microsoft has introduced similar rules for Outlook. Even if you only send a modest volume, meeting these standards improves your chances of reaching the inbox. A practical path is to make sure every service that sends on your behalf is covered by SPF and signs with DKIM, then publish DMARC at p=none to collect reports. Once the reports show legitimate mail passing, move to quarantine and eventually reject. Our check shows your current DMARC policy and SPF ending, so you can see which stage you are at and what to change next.
Why it matters
Meet bulk-sender rules
Gmail, Yahoo and Microsoft now expect SPF, DKIM and DMARC from bulk senders; the check shows where you stand.
Paste-ready DNS records
Fixes come as records you can copy straight into your DNS provider, not vague advice.
Protect your brand
A strong DMARC policy makes it harder for others to send email pretending to be you.
Who it is for
Small business owners
Find out why invoices or quotes might be landing in spam and what to change.
Agencies
Check client domains before launching email campaigns or migrating mail providers.
IT and marketing teams
Confirm authentication is in place after adding a new sending service such as a CRM or newsletter tool.
Try the free tools
Learn more
-
UK Email Security Study 2026: 1,000 Top .uk DomainsEmail Deliverability · 8 min read
-
How to Find Your DKIM Selector (and Check or Rotate It)Email Deliverability · 8 min read
-
Why Your Emails Go to Spam (and How to Fix It for Good)Email Deliverability · 8 min read
-
Gmail, Yahoo and Microsoft Bulk Sender Requirements (2026)Email Deliverability · 7 min read
-
DMARC Explained: Policies, Alignment and a Safe Rollout PlanEmail Deliverability · 8 min read
-
Email Authentication Checklist for Small Businesses (2026)Email Deliverability · 8 min read
Yes. You can run it without signing up, and the free plan includes 5 scans a day. Email authentication makes up 15% of your overall A-F grade.
No. It checks your domain configuration, which is the most common cause of deliverability problems. Content, sending reputation and list quality also play a part.
DKIM keys live under a selector chosen by your email provider. We check common selectors, but if your provider uses an unusual one, the key may exist even though we cannot see it.
With DMARC in place, ~all is widely used and works well. A -all ending is stricter; only use it once you are confident every legitimate sender is listed.
Free website audit
See how your site scores, free
Speed, SEO, DNS, email (SPF/DKIM/DMARC) and security in one scan, with a prioritised fix list.