Add a sending domain
What gets checked, and how to read a fix.
Add the hostname you put in the From address. A subdomain is a separate domain because its SPF and DKIM records often are.
Select every service that sends for it. The checker looks for that provider’s SPF include and the selectors it usually publishes.
Run check now asks public DNS immediately. The worker repeats authentication daily and blacklist checks on the plan interval.
Pass means the record is in good shape. Warning means mail can still send but something is weak, such as p=none or a short DKIM key. Fail means receivers may reject or spoof the domain. Error means DNS itself did not answer, which is not a verdict on the record.