Content is loading…
Generate ready-to-publish SPF, DKIM, and DMARC DNS TXT records for your domain.
Record name: example.com (or @) — Type: TXT
v=spf1 include:_spf.google.com ~all
Generate the actual DKIM key pair in your email provider (Google Workspace, Microsoft 365, SendGrid, etc.) — paste the public key it gives you below to format the DNS record correctly.
Record name: default._domainkey.example.com — Type: TXT
v=DKIM1; k=rsa; p=<paste your public key here>
Record name: _dmarc.example.com — Type: TXT. Start with p=none for a week or two to review reports before moving to quarantine/reject.
v=DMARC1; p=none; adkim=r; aspf=r;
Build correctly formatted SPF, DKIM, and DMARC DNS TXT records for your domain before you add them to DNS. Pick your mail senders (Google Workspace, Microsoft 365, SendGrid, Mailgun, custom IPs) for SPF, paste your DKIM selector and public key, and configure a DMARC policy with reporting addresses. Get the exact record name and value to paste into your DNS host, plus plain-English notes on each choice. Once published, verify them with the Email DNS Checker.
This free online generator allows you to build correctly formatted SPF, DKIM, and DMARC DNS TXT records without manual syntax errors. It provides a straightforward interface to select mail providers, configure policies, and output exact record names and values ready to paste into your DNS host. With no signup required and high rate limits, it streamlines email authentication setup for any domain.
Good to know: This tool generates text records for manual DNS entry and does not automate direct publishing to DNS registrars or manage ongoing domain monitoring.
Learn how to build correctly formatted SPF, DKIM, and DMARC DNS TXT records for your domain in minutes.
Select your email sending services
Choose your mail senders such as Google Workspace, Microsoft 365, SendGrid, Mailgun, or custom IPs to build your SPF record.
Configure your DKIM settings
Paste your DKIM selector and public key into the generator to format your domain's cryptographic signing record.
Set up your DMARC policy
Configure your DMARC enforcement policy and set up reporting addresses to monitor unauthorized email activity.
Copy the generated DNS records
Review the plain-English notes for each choice and get the exact record names and values for your DNS host.
Verify your records in DNS
Publish the TXT records to your DNS host and use the Email DNS Checker to verify they are working correctly.
Estimated time: PT2M
Share this tool
Check SPF, DKIM, and DMARC records for any domain with plain-English explanations.
Query A, AAAA, MX, TXT, CNAME, and NS DNS records for any domain.
Look up domain registration, expiry, nameservers, and registrar.
Generate an RFC 9116 security.txt file for responsible vulnerability disclosure.
Look up country, city, ISP, and location for any IP address.
Measure your download speed, upload speed, ping, and jitter in seconds.
See your public IP address plus full location, ISP, ASN, timezone, coordinates, and more.
Calculate subnet details from CIDR notation instantly.
Audit response headers + get a security grade for any URL.
Test if a TCP port is open on any host.
Convert text or Markdown to a Word .docx file with live preview, RTL, and page-setup options.
Draw a Secret Santa with exclusions and share a private reveal link for each person.
Make custom bingo cards from your own words — play, print, or share a link.
Convert images to video with the Ken Burns zoom/pan effect. Add music and export as WebM.
Load and compare multiple URLs side by side in resizable iframes.
Rank anything with quick 1-v-1 matchups → a full ordered list you can share.
Convert Markdown to a fully customized, RTL-ready PDF.
See your public IP address plus full location, ISP, ASN, timezone, coordinates, and more.
