How to Check Email DNS Records for Your Domain

Quick answer: To learn how to check email DNS records, query your domain's DNS zone using public tools such as the terminal (dig or nslookup command) or online DNS analyzers. You need to verify the presence of three essential entries: an MX record pointing to the correct mail server, a TXT entry with a valid SPF rule, and an active DKIM cryptographic key.

Why is proper domain configuration essential?

When a company purchases a domain on the internet, it does not come ready to send or receive electronic messages. The domain only serves as your brand's address on the web, and the DNS (Domain Name System) acts as the phonebook that directs data traffic to the correct destinations.

If your domain lacks the proper records, two serious failures occur. First, clients trying to email your team will receive an error notice stating that the destination address does not exist or cannot receive messages. Second, when you try to send proposals or quotes, recipient servers will reject your messages or send them straight to junk mail.

Understanding how to check these settings saves support time, protects your company's reputation, and prevents lost business from messages stuck in digital limbo.

Which DNS records are essential for email?

If the domain uses your domain registrar's DNS, DKIM will not fit there because that DNS does not accept the "_" character in record names. In that case, switch your DNS to Cloudflare before creating the records.

For message delivery to work securely and with high deliverability, three main components must be configured in your domain registrar's DNS zone (such as Cloudflare or GoDaddy):

1. MX Record (Mail Exchanger)

The MX record is directly responsible for telling the internet where emails sent to your domain should go. Without a valid MX record, no messages enter your company mailboxes. It defines the mail server that accepts incoming connections and includes a numerical priority value.

To understand the role of each acronym in the delivery ecosystem, check out our article on MX, SPF, DKIM, and DMARC explained without technical jargon.

2. SPF Record (Sender Policy Framework)

SPF is a TXT entry added to DNS that explicitly lists which servers or IP addresses are authorized to send emails on behalf of your domain. According to RFC 7208, which standardizes the SPF mechanism, this validation protects recipients against spoofed senders.

If someone sends a message pretending to be from your company using a server not listed in your SPF, the recipient's provider will know that the message is untrustworthy.

3. DKIM Record (DomainKeys Identified Mail)

DKIM adds a public-key cryptographic digital signature to the header of every outgoing email. As specified in RFC 6376, the recipient looks up the public key in your DNS to verify that the email truly originated from your system and that its content was not altered in transit.

Global providers enforce strict rules to protect users. According to Google's Email sender guidelines, messages sent without proper SPF and DKIM authentication face high rejection and blocking rates.

If you notice delivery failures in your daily sending, review the instructions in our guide on why my email goes to spam.

How to check email DNS records step by step

There are two practical ways to verify whether your DNS zone is properly configured: using free online tools or querying directly from your computer's terminal.

Method 1: Online analysis tools

1. Open a public DNS diagnostic tool, such as Google Admin Toolbox Dig or MXToolbox.
2. Enter your domain name without "www" or "https://" (example: yourcompany.com).
3. Select the MX query and run the check. The tool should display your email provider's server address.
4. Select the TXT query to check the SPF record. You should see a line starting with v=spf1 listing the authorized servers.
5. For DKIM, enter the selector provided by your email service along with your domain to verify the public key.

Method 2: Direct lookup via terminal (Command Prompt or Terminal)

If you are comfortable with command lines, you can check everything in seconds:

• To check MX: nslookup -q=mx yourcompany.com (on Windows) or dig yourcompany.com MX (on Linux or macOS).
• To check SPF: nslookup -q=txt yourcompany.com or dig yourcompany.com TXT.

If the commands return empty results or error messages, your domain is not yet ready to handle email.

DNS record verification checklist

Before putting your team to work, use this checklist to compare what your email provider supplied with what is published online:

Record	Type	What it does	How to verify it is correct
MX	MX	Directs incoming message delivery	Must point exactly to the provider's host, with a set priority.
SPF	TXT	Authorizes which servers can send	Must contain v=spf1, include the provider's mechanism, and end with ~all or -all. Only have one SPF record on the domain.
DKIM	TXT / CNAME	Ensures sending integrity and authenticity	The specific selector must resolve the cryptographic key without errors.

Keep in mind that DNS updates are not instantaneous. After saving entries with your domain registrar, it may take a few minutes (or up to a few hours, depending on the configured TTL) for global servers to update the information.

Why are email configuration and management often frustrating?

Many small business owners and managers struggle when adopting traditional market platforms. Giant corporate providers, like Google Workspace and Microsoft 365, charge expensive subscriptions billed per individual user. For a small team of 5 people, the monthly bill quickly becomes costly with high per-seat license fees.

Beyond individual recurring costs, these platforms' dashboards are packed with complex technical settings designed for dedicated IT departments. Anyone looking simply for email with their own domain gets lost among dozens of advanced security screens and enterprise permission tiers.

Another common mistake made by small businesses trying to bypass these costs is sharing a single password among multiple people to access shared mailboxes, such as contact@ or sales@. This creates severe security loopholes, frequent session logouts, and zero accountability regarding who replied to which message.

How Domailo simplifies your business operations

Domailo was built to solve exactly this bottleneck for small businesses in Brazil. Instead of charging per individual user, Domailo uses fixed pricing per organization. This brings total predictability to your cash flow.

With Domailo, you connect an existing domain and receive the exact DNS records you need to add to your registrar (MX, SPF, and DKIM) in a clean, straightforward interface. No confusing menus or unnecessary options.

The system runs directly in the browser through a modern, fast webmail client supporting light and dark themes. In addition, Domailo solves teamwork challenges without requiring shared passwords: you can link multiple people to the same mailbox (such as billing@), allowing each member to log in with their individual account. Administrators maintain centralized visibility over all company mailboxes.

Domailo offers transparent plans with identical features across all tiers, changing only the allocated resource limits:

• Startup plan: US$ 5.00/month (or US$ 50.00/year on the upfront annual plan, equivalent to 10 monthly payments for 12 months of access). Includes 1 domain, 2 mailboxes, and 2 users (including the administrator).
• Essential plan: US$ 9.00/month (or US$ 90.00/year on the annual plan). Includes 3 domains, 5 mailboxes, and 5 users.
• Team plan: US$ 19.00/month (or US$ 190.00/year on the annual plan). Includes 10 domains, 20 mailboxes, and 20 users.

You get sending, receiving, powerful search, multi-domain management per organization, and team invites via link, all with centralized administration.

Conclusion: ensure a professional online presence for your business

Knowing how to check email DNS records is a critical step to protect your company's communication, keep your sales quotes out of spam, and project the credibility clients and partners expect from a serious business.

If you want to eliminate headaches from exorbitant per-user pricing and cryptic configurations, Domailo is the ideal alternative for small teams that prioritize simplicity and financial predictability. Create your account today and start your 30-day Domailo trial to set up your domain and professionalize your business communications.