=== Mail Auth Check ===
Contributors: shaunwilsondesigns
Tags: email, spf, dkim, dmarc, site health
Requires at least: 6.2
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 1.0.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

See why your WordPress emails land in spam. Checks SPF, DKIM and DMARC for your sending domain and explains each result in plain English inside Site Health.

== Description ==

Contact form notifications, order emails and password resets that never arrive are one of the most common WordPress problems. Very often the cause is not WordPress at all. It is the email authentication records for the domain your site sends from: SPF, DKIM and DMARC. Gmail, Yahoo and Microsoft now expect all three from businesses that send email.

Mail Auth Check reads the public DNS records for your sending domain and tells you, in plain English, what is right, what is missing and what to change.

**What it checks**

* **SPF**: that there is exactly one SPF record, that it does not end in +all, and how many of the 10 allowed DNS lookups it uses (it follows include: and redirect=).
* **DMARC**: that a DMARC record exists, which policy it sets (none, quarantine or reject) and whether it sends you reports.
* **DKIM**: whether a DKIM key is published under the selectors common email providers and sending services use (Google, Microsoft 365, Brevo, Mailchimp, Zoho, Fastmail and others). The list can be extended with a filter.

**Where the results appear**

* **Tools > Site Health**: three tests with clear explanations and badges.
* **Tools > Mail Auth Check**: a full report, with the records themselves and a field to check a different sending domain.

**Private by design**

The plugin only reads public DNS through PHP. It sends nothing anywhere, adds no tracking and loads nothing on the front of your site. It stores the domain you enter and a 12-hour cache of the results.

Built by Shaun Wilson, a WordPress developer in Louisville, Kentucky, who fixes form email delivery for client sites.

== Installation ==

1. Upload the `mail-auth-check` folder to `/wp-content/plugins/`, or install it from the Plugins screen.
2. Activate the plugin.
3. Open Tools > Site Health, or Tools > Mail Auth Check for the full report.

== Frequently Asked Questions ==

= Which domain does it check? =

The domain in the From address WordPress uses to send email, after any SMTP or email plugin has changed it. You can enter a different domain on the Tools > Mail Auth Check screen.

= It says no DKIM key was found, but I set one up. =

DKIM keys live under a selector name that each email service chooses. The plugin checks the common ones. If yours uses another name, add it with the `mailauthcheck_selectors` filter, or confirm the key in your email provider's settings.

= Does it fix the records for me? =

No. DNS records are changed where your domain's DNS is hosted (for example Cloudflare, GoDaddy or your web host). The plugin tells you exactly what is missing so you or your developer can add it.

= Does it send test emails? =

No. It only reads DNS.

== Screenshots ==

1. The full report under Tools > Mail Auth Check.
2. The email tests in Tools > Site Health.

== Changelog ==

= 1.0.0 =
* First release: SPF, DKIM and DMARC checks in Site Health and a Tools report.
