The Email Health Checker tool helps you improve your email deliverability by checking the email account's DNS settings. It's a crucial step for successful email campaigns, so we will guide you on the setup.

Here is what you need to do:

Email Health Checker checks SPF, DKIM, DMARC, Domain age, MX records, Address records, and rDNS. If all the settings are green, you are good to go! If there are any errors on your checks, click on them to expand the details.

Here is what you need to set up your DNS:

💡 Important: your domain host is where you purchased your domain. You can sign in with the username and password when purchasing it. If you don't know who your domain host is, check this article: Identify your domain host.

A Sender Policy Framework (SPF) record is an email authentication method. It stops the fabrication of sender names, also known as email spoofing. This record defines the list of IP addresses or hosts who can send emails from your domain. To fix the SPF record, you need a list of server IP addresses you want. SPF DNS record needs to be uploaded in TXT format.

Here is a sample SPF record:

The -all column refers to the servers that aren’t listed in the SPF record and cannot send emails from your domain. You may read more about SPF syntax here.

💡 Important: There can only be one SPF record per domain. One hostname = one SPF record. Multiple SPF records can cause deliverability issues. Maximum number of DNS lookups = 10. All values should be added to one line.

Domain Keys Identified Mail (DKIM) is a secure, encrypted digital signature added to the header of your emails. It helps the receiver verify that your domain is authorized. The signatures are not visible to users as it is done at the server level. Here is how you can create a DKIM record:

The ‘public’ key will be used in your public-facing DNS TXT record with a policy record. You can use SocketLabs or EasyDMARC tools to generate private keys. Just specify your domain name and the selector being used.

DKIM format: v=DKIM1; p=yourPublicKey

Sample DKIM record:

Another standard security protocol is DMARC or Domain-based Message Authentication, Reporting & Conformance. DMARC announces what an email receiver should do with the non-aligned mail it gets.

Unlike other DNS records, domain age cannot be changed. It is an indicator that shows how long a domain has been used. However, domain age does not refer to how long you have owned a website name, but rather when Google indexed that domain first.

To check your domain age, you can use these tools: who.is or Dupli Checker.

Mail exchanger (MX) records are responsible for directing emails to the specified mail servers. They are also crucial for sending and receiving emails. MX records will reflect which mail server is responsible for that domain.

Sample MX record:

Explanations of fields:

💡 Important: MX should correspond with the mail provider. Users may use Email security tools, that will be added to MX records instead of Mail provider MX.

When you add a record to your DNS server, you choose a mail name that will be added in front of your domain (mail.com). It is A record (Address Record) that is also called the fully qualified domain name of your server. It will resolve to your IP address, so everyone knows how to contact your mail server.

For example, you can use it for store.website.com or blog.website.com and point it to where you have your store. A record maps a domain name to the IP address (Version 4) of the computer hosting the domain.

For example, an A Record points a logical domain name, such as "google.com," to the IP address of Google's hosting server, "74.125.224.147".

After updating your DNS records, run the Email Health Checker again to verify everything is set up correctly. It's crucial to have all records accurate, as a single error could lead to being blacklisted. You can also find our handy article on email deliverability here.