SPF / DKIM / DMARC record generator
Build copy-ready DNS records for email authentication. No live lookups — use the dig commands below to verify. See also the DNS record explainer.
~~~
Sending providers (include:)
Host / name
@ (apex) or
TXT value
DNS lookups: ~ / 10 max
DKIM public keys come from your email provider — not generated here. Pick your provider for setup links and selector hints.
Host / name
.
TXT value
Staged rollout: start p=none with rua reporting → quarantine with pct → reject when confident.
Host / name
_dmarc.
TXT value
~~~
Checking your setup
Run these in your terminal (replace domain/selector):
~~~
About this tool
SPF lists who may send mail for your domain (max 10 DNS lookups). DKIM signs messages with a key published in DNS. DMARC tells receivers what to do when SPF/DKIM fail. All three are TXT records at different names.
~~~