What Rigcheck inspects
- SPF
- The list of servers allowed to send email for your domain. Rigcheck also counts DNS lookups, because SPF records that need more than 10 break without any warning.
- DKIM
- A cryptographic signature that proves a message really came from your domain and wasn't altered. Rigcheck looks for keys at the selector names common email providers use.
- DMARC
- Your instructions to receivers for mail that fails SPF and DKIM: deliver it, send it to spam, or reject it. It also gets you reports on everyone sending as your domain.
- MX
- Where your domain receives email. Without it, replies and bounce messages go nowhere.
Why this matters now
Gmail, Yahoo and Microsoft now require SPF, DKIM and DMARC from bulk senders, and they increasingly filter mail from domains that skip them. A missing or broken record is one of the most common reasons password resets, invoices and newsletters land in spam.
DNS changes also break email quietly. Switching providers, adding a new tool or moving your DNS can leave an old record behind or push SPF past its lookup limit, and nothing warns you.
Questions
Is Rigcheck free?
Yes. The checker is free to use, with no account needed.
Do you store the domains I check?
Results are cached for five minutes so repeat checks are fast. Rigcheck doesn't keep a list of the domains people check, and it only reads public DNS records.
Why does DKIM say Review when I know it's set up?
DKIM keys live at a selector name chosen by your email provider. Rigcheck checks the common ones, but some providers, such as Postmark and Amazon SES, use unique names that can't be guessed. Your provider's dashboard will confirm whether DKIM is active.
How long do DNS changes take to show up?
Usually a few minutes, occasionally a few hours. Results here are cached for five minutes, so wait at least that long before checking again.