Public email check

Understand your public-record result.

Find the result from your domain check and see which record to review. For a rejected or spammed message, check your email service’s delivery and authentication results too.

Check public SPF and DMARC

No DMARC policy found

Set up DMARC safely

Use your email provider’s setup guide to check your outgoing email and add the policy to your domain.

Google Workspace DMARC setup · Microsoft DMARC setup

Start with a monitoring policy so you can check your legitimate email before turning on blocking. Why check before turning on blocking?

To find your legitimate senders, ask the people who manage your business email, invoices, website forms, and other outgoing mail which services send using your domain. Compare those services with monitoring reports before turning on blocking.

Someone else manages your email? Send them this request with your result:

Please help me add a DMARC policy for my domain. Check that every service we send email from is set up correctly before turning on blocking.

After the policy is published, check my domain again.

Where to make a change

Email records are changed where your domain’s DNS is managed—often your domain registrar or website host. Use your email service’s instructions to work out the right value, then use your DNS host’s instructions to publish it.

If you use Google Workspace:

These links are for Google Workspace. Do not copy their example values for another email service.

What to do with your result

No SPF record found: List every service that sends email for this domain. Follow those services’ SPF instructions, then publish one SPF record that includes the senders you use. Do not add a separate SPF record for each service.
Your policy is in monitoring mode: This can be a normal setup stage, not an error. Before asking email providers to block messages that cannot be verified as yours, check that your own email passes verification. Otherwise, some of your real emails could be blocked too. The person or service that manages your email can review the reports and check each service you send from.
More than one record found: Do not add another record. Combine authorized senders into one SPF record, or replace multiple DMARC records with one valid policy. If you are unsure which values to keep, ask the person or provider that manages your email and DNS before changing anything.
The record is invalid: Compare the exact public value shown in your result with your email service’s guidance, then correct that record. Do not publish a second SPF or DMARC record.
The lookup did not finish: Do not change DNS based on an unavailable result. Run the check again.
No public-record problem found: This result covers only the public records Taverlo checked. It does not identify which service sent an email or guarantee inbox delivery. Check the sending service’s authentication or delivery logs before changing DNS again.

Before you decide

Get an email when a check finds a problem.

Monitoring repeats the public email-protection checks and reviews reports from participating email providers. Try it on one business domain without a card; payment is never automatic.

What you do

Create an account, add one TXT record to confirm that you manage the domain, then review and publish one additive DMARC reporting change at your DNS provider. You make both DNS changes; Taverlo does not.

When reports arrive

Mailbox providers control whether and when they send aggregate reports. The wait can be longer than a day, and a report may not arrive.

How long free monitoring lasts

After reporting is confirmed active, one business domain stays monitored free. A provider report is not guaranteed.

For more domains

$29 a month for up to five active business domains, month to month. Payment never starts automatically.

When a step is waiting

Open the exact domain step before changing another record.

Taverlo keeps setup and report states distinct. A missing result is not silently turned into a pass or failure.

Domain-control record not visible

Compare the TXT name and value shown for this domain, leave the record in place while DNS updates, then check again. This record does not route mail.

Reporting address not confirmed

Compare the current public DMARC record with the prepared additive change. Do not add a second DMARC record. If you just published it, leave it unchanged while DNS updates, then check again.

No usable provider report yet

The reporting address is confirmed, but no usable report has arrived. This is not evidence that no mail was sent, and it is not a pass or failure. The domain page shows the last observation and when to return.

When monitoring ends

Your history remains available for 30 days.

Taverlo stops accepting new reports. During the read-only period, you can review or export history, remove only Taverlo’s reporting address, or delete the account sooner. Taverlo does not remove DNS for you.

Read the monitoring and departure terms