Free email authentication tools

Check the records your domain publishes today, then build the SPF and DMARC records it is missing. No signup, and nothing you enter is stored.

The tools

Check first. Then build what is missing.

SPF record generator

Build an SPF record for the services that send your email, with an estimate against the 10 DNS lookup limit.

Open the SPF record generator →

Where to start

From an unprotected domain to an enforced policy.

  1. 01

    Check your domain

    The free check shows which records are missing or weak.

  2. 02

    Publish SPF

    List every service that sends your email with the SPF record generator.

  3. 03

    Publish DMARC

    Start at p=none with a reporting address using the DMARC record generator.

  4. 04

    Enforce with evidence

    When your reports show your real senders pass, move to quarantine, then reject.

After the tools

Records change. Reports keep coming.

DemiSignal paid plans check your records on a schedule, alert you when something changes, and read the DMARC reports receivers send, so you know who is sending email as your domain and when it is safe to enforce.

See plans and pricing →