Build copy-paste DNS TXT records for any domain in seconds. This free SPF DKIM DMARC generator assembles a valid SPF record, a DMARC record generator with the right alignment and reporting tags, and a DKIM record from your provider's public key — no signup, all client-side.
Which services send email for you?
v=spf1) record. If one already exists, merge these mechanisms into it instead of publishing a second record — two SPF records is itself a failure.v=spf1 ~all
Publish this TXT record on yourdomain.com (host "@" or the root domain). It tells receiving servers exactly which services are allowed to send mail as your domain.
Everything runs in your browser. Nothing is uploaded or stored. After publishing, allow up to 24–48 hours for DNS changes to propagate before testing.
Mailbox providers like Gmail, Outlook, and Yahoo use email authentication as one of the strongest signals for inbox placement. Each record proves a different thing — and you need all three working together to reliably land in the inbox.
SPF (Sender Policy Framework) is a TXT record listing the servers and services authorized to send mail for your domain. When a receiver gets mail claiming to be from you, it checks the envelope sender against your SPF record. Missing or broken SPF is the most common reason legitimate mail gets flagged as spoofing.
DKIM (DomainKeys Identified Mail) adds a cryptographic signature to every message. Receivers verify it against the public key you publish at selector._domainkey.yourdomain.com, proving the mail genuinely came from you and wasn't tampered with in transit. Gmail and Yahoo bulk-sender rules require it.
DMARC (Domain-based Message Authentication, Reporting & Conformance) ties SPF and DKIM together. It tells receivers what to do when authentication fails — monitor, quarantine, or reject — and sends you aggregate reports on who is sending mail as your domain. Since February 2024, Gmail and Yahoo require DMARC for bulk senders.
IGSendMail configures SPF, DKIM, and DMARC automatically when you verify your sending domain — most users are fully authenticated in under 10 minutes. This free generator is for when you want to publish the records by hand.
IGSendMail sets up SPF, DKIM, and DMARC automatically and delivers 99% inbox placement with dedicated IPs and real-time reputation monitoring.
Want to test what you just published? Run the free Deliverability Audit.