Domain

the toolbox

Name	Nameserver	Provider

Try a selector:

Check a CNAME:

Answer a few questions to build a valid SPF record for your domain, then publish it as a TXT record at your domain's root. SPF tells receivers which servers may send mail as you.

Your domain (optional — used for the publishing hint)

Do your own servers send email? Authorize this domain's own IPs (a) — the hosts in your A/AAAA record Authorize your mail servers (mx) — the hosts in your MX record

Additional IPv4 addresses / ranges (optional) Comma- or space-separated. Added as ip4: entries (no DNS lookup cost).

Additional IPv6 addresses / ranges (optional)

Third-party senders (include) (optional)

Each include counts toward SPF's limit of 10 DNS lookups. Click a provider to add it.

How should every other server be treated? (the all mechanism) Fail (-all) — reject anything not listed. Recommended. SoftFail (~all) — accept but mark. Good while rolling out. Neutral (?all) — no assertion. Pass (+all) — allow everyone. Not recommended.

Generated SPF record

Type

TXT

Host / Name

Value

Enter a domain to fetch its live SPF record, or paste a record to inspect it. Get a breakdown of every mechanism, an explanation, and any problems.

Build a valid DMARC record, then publish it as a TXT record at _dmarc.yourdomain. DMARC tells receivers what to do with mail that fails SPF/DKIM and where to send reports.

Your domain (optional — used for the publishing hint)

Policy (p) — how receivers treat mail that fails DMARC None — monitor only, deliver as normal. Start here to gather reports. Quarantine — send failing mail to spam/junk. Reject — refuse failing mail outright. Strongest.

Aggregate report address (rua) (recommended) Daily XML summaries of who's sending as your domain. Comma-separate multiple addresses; mailto: is added for you.

Failure (forensic) report address (ruf) (optional) Per-message failure copies. Rarely honored today and may contain recipient PII.

Subdomain policy (sp)

Percentage (pct) Share of failing mail the policy applies to.

DKIM alignment (adkim)

SPF alignment (aspf)

Advanced options

Failure reporting options (fo) 0 — report if all mechanisms fail (default) 1 — report if any mechanism fails d — report on DKIM failure s — report on SPF failure

Report interval (ri), seconds

Generated DMARC record

Type

TXT

Host / Name

_dmarc

Value

Enter a domain to fetch its live DMARC record, or paste a record to inspect it. Get a plain-language breakdown of every tag and any problems.

Admin dashboard

Users

Account	Role	Status	Methods	2FA	2FA policy	Premium	Last login	Actions

Logs

Time	Event	Outcome	User	IP	Detail

Domain

Admin dashboard

Users

Logs

Insights

Global preferences

Premium

AI header inspector

Email (SMTP)

Self-service password reset