Email Security

Validate and generate SPF, DKIM, and DMARC DNS records

Record Validator

Domain

DKIM Selector

Checking DNS records…

Overall

Combined SPF + DMARC + DKIM score

Include common mail providers

Google Workspace Microsoft 365 Mailchimp SendGrid Amazon SES Salesforce Mailjet Domain A record (own server) Domain MX record (own MX)

Additional includes (one per line)

IP addresses/ranges (one per line)

Enforcement policy (all mechanism)

-all (Fail — recommended) ~all (SoftFail — testing) ?all (Neutral)

Generated SPF record

v=spf1 -all

Publish this as a TXT record at your apex domain (@).

Policy (p=)

Subdomain policy (sp=) — optional

Percentage (pct=)

DKIM alignment (adkim=)

SPF alignment (aspf=)

Report interval (ri=) seconds

Aggregate report URI (rua=) — one address per line

Forensic report URI (ruf=) — optional

Generated DMARC record

Publish this as a TXT record at _dmarc.yourdomain.com.

Generates an RSA keypair server-side using OpenSSL. The private key is shown once — save it immediately.

Selector

Domain

Key size

Generating RSA key…

DNS TXT record name

DNS TXT record value

Private key (PEM) — save this now, it will not be shown again