SPF, DKIM & DMARC Generator

Generate SPF, DKIM, and DMARC Records the Right Way

Email authentication is three DNS records working together: SPF says which servers may send for your domain, DKIM publishes the public key that verifies your signature, and DMARC ties them together and tells receivers what to do with mail that fails. This tool builds all three from plain-language forms, so you get valid, correctly-formatted TXT records without memorizing the syntax.

Every field is explained as you fill it in, and the output is a ready-to-paste record with the exact host and value your DNS provider asks for — plus live warnings for the mistakes that quietly break deliverability, like passing SPF's 10-lookup limit or enforcing DMARC with nowhere to send the reports.

Two honest limits: it writes the record text, it does not read or change your live DNS, so paste the result into your provider and confirm it with a lookup afterward. And it never touches private keys — DKIM key pairs are generated by your email provider, and you paste only the public half here.

Common Uses

• New domain setup: Add SPF, DKIM, and DMARC before your first campaign so mail lands in the inbox instead of spam.
• Multiple senders: Combine Google Workspace, a marketing platform, and a transactional service into one valid SPF record — and watch the lookup counter stay under 10.
• DMARC rollout: Start at p=none with reporting, then step through quarantine to reject using the pct field, without hand-editing tags.
• Fixing failures: Rebuild a malformed record that a mail tester flagged, with the correct qualifier, alignment, and syntax.
• Client handoffs: Produce clean, documented records for a customer's domain that any DNS dashboard will accept.

Privacy: Every record is assembled entirely in your browser with client-side JavaScript. Your domain, keys, and report addresses are never uploaded, logged, or sent to any server.