We use essential cookies to run CoreRipper, and optional personalization/analytics/advertising cookies to remember things like your theme and improve the free tier. See our Cookie Policy.
Pick your mail providers, get ready-to-paste SPF, DMARC and DKIM DNS records.
Check every service that sends mail as your domain (your inbox provider, plus any marketing/transactional senders). SPF only needs one TXT record combine everything into it.
Generated SPF record
v=spf1 ~all
Where to publish it
Create a TXT record at the root of your domain (host: @ or your bare domain), with the value shown above. If a TXT record starting with v=spf1 already exists, replace it don't add a second one. Per RFC 7208, more than one SPF record makes SPF invalid entirely.
Check what's live now
Enter a domain to see its currently published SPF record.
DMARC tells receiving mail servers what to do with messages that fail SPF/DKIM, and where to send you reports about it.
Generated DMARC record
v=DMARC1; p=none;
Where to publish it
Create a TXT record at host _dmarc.example.com with the value shown above.
Recommended rollout don't jump straight to reject
1
p=none for 1–2 weeks with rua set. You collect reports and see exactly which senders would fail, with zero delivery risk.
2
p=quarantine, ideally starting at a low pct (e.g. 10–25) and ramping to 100 over a few weeks once reports look clean.
3
p=reject at pct=100 once you're confident every legitimate sender passes alignment.
Check what's live now
Enter a domain to see its currently published DMARC record.
DKIM keys are generated by your mail provider and are cryptographically tied to your account there's no generic key this wizard can hand you. Follow your provider's steps below, then verify the record it publishes.
Verify a DKIM record after publishing
Not sure of your selector? Try the common ones for your provider from the guide above.
Enter a domain and selector to check the live DKIM record.