Systeme.io Domain & Email Setup Checker
Type your domain and see in seconds whether your Systeme.io custom domain and email authentication records are set up correctly, with plain-English fixes for anything that is wrong.
- No sign-up needed
- Read-only: never changes your DNS
- Runs in your browser
Check your domain
Done with DNS? Get the rest of the launch kit.
Enter your email and we will send you a message with download links. You see your results above either way; the kit is optional.
- 7-Day Funnel Launch Checklist (PDF)
- Welcome Email Sequence Templates (PDF)
- Video training link: your first funnel, step by step
What this checker looks at
Each check reads one kind of public DNS record and explains what it found. Nothing is guessed: if a record cannot be verified from the outside, the tool says so instead of showing a green tick.
| Check | What we look for | Why it matters |
|---|---|---|
| Pages connection | A CNAME on your subdomain (for example www) that points to the address Systeme.io gives you, plus the IP addresses it resolves to. | Without it, your funnels and pages do not load on your own domain. |
| Certificate validation | The validation CNAME from the Systeme.io pop-up, if you paste it (it is unique to your account). | Used to prove you control the domain so it can be served securely over HTTPS. |
| Root domain | Whether yourdomain.com (without www) resolves at all. | Visitors who type the bare domain should land on your site, not an error. |
| SPF | One SPF record, a closing -all or ~all, and no more than 10 DNS lookups (nested includes counted). | Tells receiving servers which services may send mail for your domain. |
| DMARC | A single _dmarc record, its policy (p=) and reporting address. | Ties SPF and DKIM together; Google and Yahoo expect it from bulk senders. |
| Email authentication CNAMEs | The records you paste, compared with what DNS returns. Without a paste, we scan common DKIM selector names and list what we find. | These records let inbox providers verify your emails really come from you. |
| MX & nameservers | Where your mail is received and which company runs your DNS. | Replies need a mailbox, and fixes depend on where your DNS lives. |
What a result looks like
This is a made-up report for yourbrand.com, to show how findings and fixes are written.
Found a CNAME to a cloudfront.net address, and it resolves to IP addresses. Nothing to do.
Receivers will accept mail from unlisted senders but may mark it as suspicious. Once every service you use is listed, change ~all to -all.
Add a TXT record named _dmarc with the value v=DMARC1; p=none; rua=mailto:you@yourbrand.com, wait for DNS to update, then re-run the check.
Need a Systeme.io account to connect a domain to? The Free plan includes 1 custom domain, 3 funnels and 2,000 contacts, with no credit card required (per Systeme.io’s pricing page, checked October 12, 2026).
Try Systeme.io FreeQuestions about Systeme.io domains and email DNS
How long does a DNS change take to show up?
Systeme.io’s own domain guide says DNS can take 24 to 48 hours to fully propagate. Many changes appear within minutes or hours, but if a record you just added is missing, wait and run the check again before changing anything else.
Why does the tool ask me to paste records from Systeme.io?
Several records, such as the certificate-validation CNAME and the email authentication CNAMEs, contain values generated for your account. We cannot see your account, so we cannot know them. When you paste them, the tool checks that each one exists in public DNS and, if you included the target, that it matches exactly.
Do I need an SPF record if I send email through Systeme.io?
Systeme.io’s domain tooling describes CNAME records plus a DMARC record for authentication, so a missing SPF record is shown as a warning, not a failure. If you also send mail from the same domain through another service such as Google Workspace or Microsoft 365, you do need SPF, and you must have only one SPF record in total.
What DMARC policy should I use?
Start with p=none, which only monitors, and add a rua= address to receive reports. When you are confident every legitimate sender passes, move to p=quarantine and later p=reject. Jumping straight to reject can block your own mail if a sender is missing.
Should I connect www.yourdomain.com or the bare yourdomain.com?
Systeme.io’s guide connects the www version and then sends the bare domain to www with a redirect at your DNS host or registrar. A CNAME is normally not allowed on the bare domain, which is why www is the usual choice.
Does this tool change my DNS or store my domain?
No. It only reads public records. The lookups go from your browser to Google Public DNS (with Cloudflare DNS as a backup). We do not send your domain to our server or include it in our analytics events. Your browser may remember the last domain you typed so the page can pre-fill it next time.
How is this different from Systeme.io’s own Domain Health Checker?
Systeme.io offers its own Domain Health Checker, which reads general records such as DMARC, SPF, DKIM, MX, A, CNAME and NS. This tool is built around a Systeme.io setup: it checks the CNAME that connects your pages, compares the records you paste from your dashboard, and gives step-by-step fixes with links to Systeme.io’s registrar guides. Using both is fine.
My DNS is on Cloudflare. Anything special?
Cloudflare’s proxy (the orange cloud) can hide a CNAME and show Cloudflare addresses instead, so a record can look wrong from the outside even though it exists. Systeme.io has a Cloudflare-specific guide for email authentication; if the pages connection fails, check whether the record is proxied.
Guides and tools that pair with this checker
New here? Start Here walks you through choosing a plan, setting up your domain and launching.