SPF, DKIM, DMARC: reading Formitor's deliverability strip

Tutorial: what the deliverability badges above your form list mean, why a missing DMARC record costs you leads, and how to fix each record.


July 18, 2026 · Formitor

A form can pass every test and the lead still dies in a spam folder. That’s why every site’s form list carries a deliverability strip: Formitor continuously checks the DNS posture of the domain your notification emails are sent from.

The short version on video:

The strip

Deliverability strip with SPF missing and DMARC missing badges

Three records, three badges:

  • SPF: lists which servers may send mail for the domain. Missing = any receiving server is entitled to distrust your mail.
  • DKIM: cryptographic signature proving the mail wasn’t altered. A ? means Formitor couldn’t confirm a selector; check your SMTP provider’s setup.
  • DMARC: the policy tying SPF and DKIM together, and the record Gmail and Yahoo now effectively require for reliable delivery. Missing DMARC is the single most common reason “the form works but clients never see the email”.

Recheck DNS re-runs the lookups on demand after you change records, so you aren’t waiting for the daily pass. Explain / How to fix generates the exact records to add.

Fixing the common case

For a WordPress site sending through an SMTP plugin, the minimal healthy set is: an SPF record including your provider (v=spf1 include:<provider> ~all), the provider’s DKIM records, and a starter DMARC record (v=DMARC1; p=none; rua=mailto:you@yourdomain.com). p=none observes without blocking; tighten later.

Records live at your DNS host (Cloudflare, registrar panel). Add, then hit Recheck DNS and watch the badges flip green.

Why Formitor watches this at all

Delivery verification tells you a specific email arrived. Deliverability posture predicts whether the next thousand will. Both together are what “your forms work” actually means.

Keep reading

Tutorial · Jul 18, 2026

Wire alerts into Slack, Discord, SMS or any webhook

Tutorial: set up Formitor alert destinations (Slack, Discord, Microsoft Teams, Twilio SMS, or a raw webhook into Zapier, n8n or Make) plus the Monday weekly report.

Read post
Tutorial · Jul 18, 2026

Set up checkout monitoring on a WooCommerce store

Tutorial: configure Formitor's synthetic checkout, a scheduled $0 test order that proves the page loads, the order completes and the confirmation email arrives, then deletes itself.

Read post
Tutorial · Jul 18, 2026

Give your AI agent eyes on your forms (MCP tutorial)

Tutorial: mint a Formitor MCP token and connect Claude or any MCP-capable agent, so you can ask 'what's broken across my sites?' straight from your terminal.

Read post
Tutorial · Jul 18, 2026

Control the testing: frequency, pausing, active hours

Tutorial: set per-form check frequency, run a check on demand, pause a single form or a whole site, and keep test traffic inside business hours with active-hours windows.

Read post
Tutorial · Jul 18, 2026

Hijack forms: live-test without spamming the client

Tutorial: temporarily reroute a site's form notification emails to your own inbox while you test, with an automatic shut-off. Real visitor submissions are never touched.

Read post
Tutorial · Jul 18, 2026

How to add a website to Formitor

Step-by-step tutorial: install the Formitor plugin on a WordPress site, copy its pairing credentials, and connect it to your dashboard in about a minute.

Read post

Catch the failure before the client does.

Free plan: 2 sites, every feature, no card. See what it finds.