Email Health Score

A score of 80+ (grade A or A+) means your domain has strong email authentication. Scores between 60-79 (B-C) indicate partial setup with room for improvement. Below 60 (D-F) means critical authentication records are missing. The most impactful improvements are adding DMARC with p=reject and SPF with -all.

We check four categories: DMARC (up to 35 points for record presence and policy strength), SPF (up to 35 points for record presence, -all qualifier, and lookup count), MX records (15 points for having mail servers configured), and DKIM (15 points for having discoverable DKIM selectors). The total out of 100 maps to a letter grade.

We check 8 common DKIM selector names (default, google, selector1, selector2, k1, dkim, mail, arc). If your provider uses a custom selector name, it won't appear in this scan. Use our DKIM Record Checker tool to look up a specific selector by name.

Check after any DNS changes, and at least monthly to catch accidental deletions or misconfigurations. ARC-Relay Pro includes continuous monitoring that alerts you the moment a record changes, so you don't need to check manually.

A perfect authentication score means your DNS records are properly configured, which is necessary but not sufficient for inbox delivery. Other factors include sender reputation, email content, sending volume patterns, and recipient engagement. This score focuses exclusively on the DNS authentication layer.