SPF, DKIM and DMARC Tools
Set up SPF, DKIM and DMARC records without the guesswork. Create common records, check pasted SPF text and follow practical setup checklists.
Start here
DMARC Record Generator
Create a record with plain-English options.
SPF Record Generator
Create a record with plain-English options.
SPF Record Checker
Check pasted SPF text for common mistakes.
Email Authentication Remediation Plan
Check pasted SPF text for common mistakes.
Email Authentication Change Pack
Check pasted SPF text for common mistakes.
Email Authentication Checklist
Follow a practical setup guide.
DKIM Setup Checklist
Follow a practical setup guide.
Practical guides, templates and case studies
SPF Void Lookups: Causes, Limits and Fixes
Follow a practical setup guide.
Google Workspace SPF, DKIM and DMARC
Follow a practical setup guide.
Microsoft 365 SPF, DKIM and DMARC
Follow a practical setup guide.
DMARC Policy Explained
Follow a practical setup guide.
Why Are My Emails Going to Spam?
Follow a practical setup guide.
Authentication-Results Header Guide
Follow a practical setup guide.
Email Sender Inventory Template
Follow a practical setup guide.
DMARC Rollout Case Study
Follow a practical setup guide.
SPF DNS Lookup Budget Guide
Follow a practical setup guide.
Email Authentication Change and Rollback Checklist
Follow a practical setup guide.
Start from the symptom
- A new sending service: inventory its envelope sender and signing domain before changing SPF or DKIM.
- A DMARC failure: check whether the passing SPF or DKIM domain aligns with the visible From domain.
- Mail reaching spam: inspect Authentication-Results, then review reputation, complaints, list quality and recipient expectations.
- A move towards enforcement: review aggregate reports and known senders before changing from monitoring to quarantine or reject.
What a DNS record cannot prove
A record can be syntactically valid while legitimate mail remains unsigned, uses another envelope domain or fails alignment. Send a real message through every normal platform to an independent mailbox and inspect the received headers.
Keep a rollback record
Before changing DNS, save the existing record, TTL, provider, time and reason. Change one control at a time and define the evidence that will justify keeping or reversing it.
Editorial responsibility
Published by Acerville Sparks Limited. Software assists research, drafting and automated record testing. Internet standards, provider documentation, reproducible checks and limitations are shown so readers can inspect the work. No independent deliverability consultant review is claimed. Reviewed 4 September 2026.
What this site does not do
No inbox guarantee. No live DNS checks. No storage of entered data. No passwords or private keys requested.