shopify.com
84/100
Mail provider: Google Workspace
| Check | Details | |
|---|---|---|
| MX | ✔ | aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, alt3.aspmx.l.google.com, alt4.aspmx.l.google.com |
| SPF | ✔ | v=spf1 include:_spf.google.com include:mail.zendesk.com include:sendgrid.net ~all (4 lookups); ~all (softfail) - fine with DMARC; -all is stricter |
| DKIM | ⚠ | Selectors found: google (1024-bit), mail (1024-bit), smtpapi (1024-bit); upgrade 1024-bit keys to 2048-bit |
| DMARC | ✔ | v=DMARC1; p=reject; pct=100; fo=1; rua=mailto:dmarc-aggregate@shopify.com;ruf=mailto:dmarc-reports@shopify.com |
| MTA-STS | ⚠ | Not set (optional; enforces TLS for mail sent to you) |
| TLS-RPT | ⚠ | Not set (optional; reports TLS delivery failures) |
| BIMI | ✔ | v=BIMI1; l=https://vmc.digicert.com/8833b699-1227-41ee-b185-cc2d9a08e213.svg; a=https://vmc.digicert.com/8833b699-1227-41ee-b185-cc2d9a08e213.pem; |
How to fix it
- No DNS changes needed. 🎉
DNS changes can take up to 24–48 hours. Re-run the check afterwards.
Want it fixed for you? I set up SPF, DKIM and DMARC without breaking your other senders,
with a before/after report.
Get it fixed on Fiverr
Get it fixed on Fiverr
Prefer to do it yourself? Get the step-by-step Fix Kit ($15) – 19-page guide, checklist, 20+ providers.