Email Account's Health Checker Overview
The Email Health Checker tool helps you improve your email deliverability by checking the email account's DNS settings.
It's a crucial step for successful email campaigns, so we will guide you on the setup.
Here is what you need to do:
- go to the Email Accounts of your Settings
- click on your domain and check the Domain Setup tab
Email Health Checker checks SPF, DKIM, DMARC, Domain age, MX records, Address records, and rDNS. If all the settings are
green, you are good to go! If there are any errors on your checks, click on them to expand the details.
Fixing DNS settings
Here is what you need to set up your DNS:
- go to your hosting website
- sign in to your account
- open DNS manager for a domain
💡 Important: your domain host is where you purchased your domain. You can sign in with your username and password when
purchasing it. If you don't know who your domain host is, check this article: Identify your domain host.
- How to set up MX, A, rDNS, SPF, DKIM and DMARC and authenticate your emails
- How to set up SPF, DKIM and DMARC: Google Workspace and GoDaddy
- How to set up SPF, DKIM and DMARC: Google Workspace and Namecheap
- How to set up SPF, DKIM and DMARC: Office 365 and Namecheap
- [How to set up SPF, DKIM and DMARC: other mail & hosting providers](How to set up SPF, DKIM and DMARC: other mail &
hosting providers providers)
- How to set up MX records for any other mail provider [list]
- How to set up MX records for Office 365
SPF
A Sender Policy Framework (SPF) record is an email authentication method. It stops the fabrication of sender names, also
known as email spoofing. This record defines the list of IP addresses or hosts who can send emails from your domain. To
fix the SPF record, you need a list of server IP addresses you want. SPF DNS record needs to be uploaded in TXT format.
- TXT value: v=spf1 [mail provider value] ~all (other options: -all/?all)
Here is a sample SPF record:
v=spf1 mx include:_spf.google.com ip4:65.254.224.19 -all
| v=spf1 | mx | include | ip4:66.96.128.0 | -all | | --- | --- | --- | --- | --- | | Sets the SPF version being used. |
Allows the domain’s MX details to send an email. | Includes Google mail servers as authorized servers. | This IP address
will pass. | Any other IP address will fail. |
The -all column refers to the servers that aren’t listed in the SPF record and cannot send emails from your domain. You
may read more about SPF syntax here.
💡 Important: There can only be one SPF record per domain. One hostname = one SPF record. Multiple SPF records can cause
deliverability issues. Maximum number of DNS lookups = 10. All values should be added to one line.
DKIM
DomainKeys Identified Mail (DKIM) is a secure, encrypted digital signature added to the header of your emails. It helps
the receiver verify that your domain is authorized. The signatures are not visible to users as it is done at the server
level. Here is how you can create a DKIM record:
- Determine which domains can send outbound mail on its behalf.
- Create the DKIM public/private keys and the policy record.
The ‘public’ key will be used in your public-facing DNS TXT record with a policy record. You can use SocketLabs or
EasyDMARC tools to generate private keys. Just specify your domain name and the selector being used.
DKIM format: v=DKIM1; p=yourPublicKey
Sample DKIM record:
v=DKIM1;k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeIhtCv3vUinyhKiKtZ8efjHGGo8gE1T+o7gLrvo6yRtdz9ICe6Fz5sgz0WYFW5nCV4DmaTcS25TfgWKsLggG
| v=DKIM1 | p | | --- | --- | | Sets the SPF version being used. | yourPublicKey |
DMARC
Another standard security protocol is DMARC or Domain-based Message Authentication, Reporting & Conformance. DMARC
announces what an email receiver should do with the non-aligned mail it gets.
Sample DMARC record:
“v=DMARC1; p=reject; pct=100; rua=mailto:[email protected]”.
You can check the below table to get an idea of DMARC tags.
| v=DMARC1 | p | pct | rua | | --- | --- | --- | --- | | Sets the SPF version being used. | Policy of organizational
Domain | Percentage of Messages | Report for URI (Aggregate) |
Domain age
Unlike other DNS records, domain age cannot be changed. It is an indicator that shows how long a domain has been used.
However, domain age does not refer to how long you have owned a website name, but rather when Google indexed that domain
first.
To check your domain age, you can use these tools: who.is or Dupli Checker.
MX record
Mail exchanger (MX) records are responsible for directing emails to the specified mail servers. They are also crucial
for sending and receiving emails. MX records will reflect which mail server is responsible for that domain.
Sample MX record:
$TTL 1200
example.com. IN A 93.184.216.34
example.com. IN MX 10 mail1.example.com.
example.com. IN MX 10 mail2.example.com.
example.com. IN MX 50 mail3.example.com.
Explanations of fields:
- Example.com - your domain name.
- MX - record type.
- Name: The domain or subdomain for the MX record. Use @ to deliver email to your root domain, or use a subdomain such
as www or mail.
- Priority: The order in which the record is evaluated and used. Lower priorities will be read before higher
priorities.
- Value: The mail server's address, such as smtp.secureserver.net.
- TTL: How long the server should cache information. The default setting is 1 hour.
💡 Important: MX should correspond with the mail provider. Users may use Email security tools, that will be added to MX
records instead of Mail provider MX.
A Record
When you add a record to your DNS server, you choose a mail name that will be added in front of your domain (mail.com).
It is A record (Address Record) that is also called the fully qualified domain name of your server. It will resolve to
your IP address, so everyone knows how to contact your mail server.
For example, you can use it for store.website.com or blog.website.com and point it to where you have your store. A
record maps a domain name to the IP address (Version 4) of the computer hosting the domain.
For example, an A Record points a logical domain name, such as "google.com," to the IP address of Google's hosting
server, "74.125.224.147".
Wrap up
After updating your DNS records, run the Email Health Checker again to verify everything is set up correctly. It's
crucial to have all records accurate, as a single error could lead to being blacklisted. You can also find our handy
article on email deliverability here.