Email authentication tools

Generate valid SPF and DMARC records, then verify them live against public DNS — everything runs in your browser.

Authorized sending IPs (space or comma separated) Include common providers

Namecheap PrivateEmail

Google Workspace

SendGrid

Additional includes (optional) Policy for non-matching mail

v=spf1 -all

Add this as a TXT record on your root domain. Publish only one SPF record per domain.

Policy Aggregate report address (rua) Forensic report address (ruf, optional) Percentage of mail to apply policy (pct)

Strict SPF alignment (aspf=s)

Strict DKIM alignment (adkim=s)

v=DMARC1; p=none

Add as a TXT record at _dmarc.yourdomain. Start with p=none to monitor, then tighten to quarantine and reject.

Domain to inspect

Queries A, MX, and TXT records live via Cloudflare DNS-over-HTTPS.

Enter a domain and run a lookup to see its live DNS records.