SPF · DKIM · DMARC Stop landing in spam. Stop being spoofed.
Patchkit checks your email authentication, explains what is wrong and points you to the fix, then reads your DMARC reports so you can block impersonators without blocking yourself.
Gmail, Yahoo and Outlook now check who you are
Since 2024 Google and Yahoo, and since May 2025 Microsoft, have sender requirements that make bulk senders set up SPF, DKIM and DMARC. Mail that fails lands in spam or is rejected, and without DMARC anyone can send email that looks like yours.
01
Check
Run a free health check. We read your SPF, DKIM and DMARC records and every include behind them.
02
Patch
Each finding is explained, and common ones link to the generator or setup guide with the records to publish.
03
Monitor
Point your DMARC reports at Patchkit to see every service sending as you, and move to p=reject without breaking mail.
What SPF, DKIM and DMARC do
Three DNS records decide whether receivers can trust mail that uses your domain. Each answers a different question, and only together do they protect the address people see.
SPF
A TXT record listing the servers allowed to send mail for your domain. Receivers compare the server that delivered a message with that list, using the domain in the envelope sender rather than the From line.
What is SPF?DKIM
A signature added to every message with a private key, checked against a public key you publish in DNS. It proves which domain vouched for the message and that the signed parts weren't changed.
What is DKIM?DMARC
A record at _dmarc that ties SPF and DKIM to the From address people see. It tells receivers what to do when neither passes for your domain, and where to send reports about it.
What is DMARC?New to all of this? The Learn section starts with how the three fit together and goes on to the problems people run into most.
Frequently asked questions
+Do I need SPF, DKIM and DMARC, or is one enough?
All three. SPF and DKIM each prove something about a message, but neither checks the From address. DMARC connects them to it, and Google, Yahoo and Microsoft ask bulk senders for all three.
+Is the domain check free?
Yes. The health check and every checker are free and need no account, and each problem they find comes with how to fix it.
+Does Patchkit change my DNS records?
No. Patchkit reads your public DNS and shows you what to publish. You add the records at your DNS host, and the setup guides show where for the common ones.
+What does report monitoring add?
Once your DMARC record sends reports to Patchkit, you see the services that send mail as your domain and whether each one passes, and you get a step-by-step path to p=reject. It is free for 1 domain.
Start with a free check
No signup. Results in a few seconds, with every finding explained.