All Collections
Getting Started
Articles
Email Account's Health Checker Overview
Email Account's Health Checker Overview

Learn how to use Email Health Checker to check DNS records and fix possible gaps

Reply Team avatar
Written by Reply Team
Updated over a week ago

The Email Health Checker tool helps you improve your email deliverability by checking the email account's DNS settings. It's a crucial step for successful email campaigns, so we will guide you on the setup.

Here is what you need to do:

  • go to the Email Accounts of your Settings

  • click on your domain and check the Domain Setup tab

Email Health Checker checks SPF, DKIM, DMARC, Domain age, MX records, Address records, and rDNS. If all the settings are green, you are good to go! If there are any errors on your checks, click on them to expand the details.

Fixing DNS settings

Here is what you need to set up your DNS:

  • go to your hosting website

  • sign in to your account

  • open DNS manager for a domain

💡 Important: your domain host is where you purchased your domain. You can sign in with the username and password when purchasing it. If you don't know who your domain host is, check this article: Identify your domain host.

SPF

A Sender Policy Framework (SPF) record is an email authentication method. It stops the fabrication of sender names, also known as email spoofing. This record defines the list of IP addresses or hosts who can send emails from your domain. To fix the SPF record, you need a list of server IP addresses you want. SPF DNS record needs to be uploaded in TXT format.

  • TXT value: v=spf1 [mail provider value] ~all (other options: -all/?all)

Here is a sample SPF record:

v=spf1 mx include:_spf.google.com ip4:65.254.224.19 -all

v=spf1

mx

include

ip4:66.96.128.0

-all

Sets the SPF version being used.

Allows the domain’s MX details to send an email.

Includes Google mail servers as authorized servers.

This IP address will pass.

Any other IP address will fail.

The -all column refers to the servers that aren’t listed in the SPF record and cannot send emails from your domain. You may read more about SPF syntax here.

💡 Important: There can only be one SPF record per domain. One hostname = one SPF record. Multiple SPF records can cause deliverability issues. Maximum number of DNS lookups = 10. All values should be added to one line.

DKIM

Domain Keys Identified Mail (DKIM) is a secure, encrypted digital signature added to the header of your emails. It helps the receiver verify that your domain is authorized. The signatures are not visible to users as it is done at the server level. Here is how you can create a DKIM record:

  • Determine which domains can send outbound mail on its behalf.

  • Create the DKIM public/private keys and the policy record.

The ‘public’ key will be used in your public-facing DNS TXT record with a policy record. You can use SocketLabs or EasyDMARC tools to generate private keys. Just specify your domain name and the selector being used.

DKIM format: v=DKIM1; p=yourPublicKey

Sample DKIM record:

v=DKIM1;k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeIhtCv3vUinyhKiKtZ8efjHGGo8gE1T+o7gLrvo6yRtdz9ICe6Fz5sgz0WYFW5nCV4DmaTcS25TfgWKsLggG

v=DKIM1

p

Sets the SPF version being used.

yourPublicKey

DMARC

Another standard security protocol is DMARC or Domain-based Message Authentication, Reporting & Conformance. DMARC announces what an email receiver should do with the non-aligned mail it gets.

Sample DMARC record:

“v=DMARC1; p=reject; pct=100; rua=mailto:test@domain.com”.
You can check the below table to get an idea of DMARC tags.

v=DMARC1

p

pct

rua

Sets the SPF version being used.

Policy of organizational Domain

Percentage of Messages

Report for URI (Aggregate)

Domain age

Unlike other DNS records, domain age cannot be changed. It is an indicator that shows how long a domain has been used. However, domain age does not refer to how long you have owned a website name, but rather when Google indexed that domain first.

To check your domain age, you can use these tools: who.is or Dupli Checker.

MX record

Mail exchanger (MX) records are responsible for directing emails to the specified mail servers. They are also crucial for sending and receiving emails. MX records will reflect which mail server is responsible for that domain.

Sample MX record:

$TTL 1200
example.com. IN A 93.184.216.34
example.com. IN MX 10 mail1.example.com.
example.com. IN MX 10 mail2.example.com.
example.com. IN MX 50 mail3.example.com.

Explanations of fields:

  • Example.com - your domain name.

  • MX - record type.

  • Name: The domain or subdomain for the MX record. Use @ to deliver email to your root domain, or use a subdomain such as www or mail.

  • Priority: The order in which the record is evaluated and used. Lower priorities will be read before higher priorities.

  • Value: The mail server's address, such as smtp.secureserver.net.

  • TTL: How long the server should cache information? The default setting is 1 hour.

💡 Important: MX should correspond with the mail provider. Users may use Email security tools, that will be added to MX records instead of Mail provider MX.

A Record

When you add a record to your DNS server, you choose a mail name that will be added in front of your domain (mail.com). It is A record (Address Record) that is also called the fully qualified domain name of your server. It will resolve to your IP address, so everyone knows how to contact your mail server.

For example, you can use it for store.website.com or blog.website.com and point it to where you have your store. A record maps a domain name to the IP address (Version 4) of the computer hosting the domain.

For example, an A Record points a logical domain name, such as "google.com," to the IP address of Google's hosting server, "74.125.224.147".

Wrap up

After updating your DNS records, run the Email Health Checker again to verify everything is set up correctly. It's crucial to have all records accurate, as a single error could lead to being blacklisted. You can also find our handy article on email deliverability here.

Did this answer your question?