Check your email sender (SPF, DKIM, DMARC)

Help Center › Marketing & messaging › Check your email sender (SPF, DKIM, DMARC)

Check your email sender (SPF, DKIM, DMARC)

Run the sender check in Marketing → Safety and fix any of the three DNS records it says are missing.

Inboxes trust email that proves who sent it. VisionScaper checks three DNS records on your sending domain and tells you what is missing.

Before you start

  • The site administrator must have set a Send from address in Settings → VisionScaper Marketing. The check uses the part after the @ sign as the domain. If none is set, you see “No sender email is set up yet. The site administrator sets it in Settings → VisionScaper Marketing.”
  • You need access to your domain’s DNS settings (often at your domain registrar or host).

Steps

  1. Go to Marketing → Safety and find ✉️ Email sender check.
  2. Click Check my sender (it says Check again after the first run).
  3. Read the three rows. A ✅ means found, a ❌ means missing:
    – SPF: says which servers may send for your domain.
    – DKIM: a signature that proves the email was not changed.
    – DMARC: tells inboxes what to do with fakes.
  4. For each ❌, read the line of advice below it and add the record in your DNS:
    – SPF: a TXT record on your domain that starts with v=spf1. Your email service shows the exact value.
    – DKIM: the record your email service gave you, a TXT or CNAME record under _domainkey.
    – DMARC: a TXT record on _dmarc.yourdomain.com with a value like v=DMARC1; p=none; rua=mailto:you@yourdomain.com.
  5. DNS changes can take time to spread. Click Check again later.

The result and time are saved, and the check is written to your record (Marketing → Safety → Your record).

How the check looks for DKIM

VisionScaper looks for a DKIM record under these common names on your domain: resend._domainkey, s1._domainkey, s2._domainkey, pm._domainkey, selector1._domainkey, selector2._domainkey, google._domainkey, default._domainkey, mail._domainkey and k1._domainkey. If your provider uses a different name, the check can show DKIM as missing even when it is set up. This is a limit of the check.

Why it matters

If the site administrator turns on “Only let a business send marketing email after the sender passes the email check”, your marketing email waits until all three pass. The Safety card says “Marketing email waits until all three pass.” The message in a held send reads “Email sending hasn’t passed its check yet (Marketing → Safety)”.

Tips

  • Start with p=none for DMARC if you are unsure. Follow your email provider’s current advice for a stricter policy.
  • Run the check again after you change email services.

If something goes wrong

  • Everything shows ❌ but you know the records exist: wait for DNS to update, then check again. Also confirm the Send from address uses the domain you set up.
  • Your own sender is not the site’s sender: the check is for the site’s shared sender, not a personal address.

Related articles

Still need help?

Tell us what you were trying to do and a person will reply.

Contact support