SPF & DMARC record generator
Build a correct SPF and DMARC record for your domain. Choose the services that send your mail and the policy you want - the exact DNS record text appears below, ready to copy. Everything runs in your browser; this tool never reads or changes your DNS.
SPF record
Pick every service that sends mail for your domain. SPF lists who is allowed to send - leaving one out makes its mail fail.
v=spf1 ~all- No senders, IPs, or includes selected - this record authorizes nothing and will fail SPF for all mail from the domain.
DMARC record
DMARC tells receivers what to do when a message fails SPF and DKIM, and sends you reports. Publish it at _dmarc.yourdomain.com.
v=DMARC1; p=none- p=none with no rua= collects no reports. Add an aggregate report address so you can see what passes and fails before tightening the policy.
Generated a record? Scan your domain after you publish it to confirm it resolves correctly. This tool builds the text only - it does not read or change your DNS.
Not sure what your domain has today? Scan it for free to see your current SPF, DKIM, and DMARC and exactly what to fix.