Microsoft 365 email setup check
Type your domain. We read the records Microsoft 365 asks for and tell you which are right, which are missing, and exactly what to add.
What you get
- MX: whether mail is delivered to Microsoft 365, and whether old mail servers are still listed.
- SPF: whether it includes spf.protection.outlook.com and rejects other senders.
- DKIM: whether selector1 and selector2 are published, so mail is signed as your domain.
- DMARC: whether spoofed email is stopped or only reported.
- Autodiscover: whether Outlook can find the mailbox by itself.
Common questions
Where do I turn on DKIM for Microsoft 365?
In the Microsoft Defender portal under Email authentication settings, DKIM. It shows two CNAME records (selector1 and selector2); add both at your DNS host, then switch DKIM on.
My MX record looks different from the example.
Microsoft gives each domain its own MX host, usually your domain with dashes followed by .mail.protection.outlook.com. Any host ending in .mail.protection.outlook.com is Microsoft 365.
Is autodiscover required?
Mail works without it, but Outlook on desktops and phones may ask for server settings. One CNAME record fixes it.
Get told when it changes
Add the site to a free account and we check it every five minutes, with certificate, domain and email security alerts in plain English.