How to use SPF / DMARC
- 1. Set the domain and SPF includes. Fail policy is -all, ~all, or ?all.
- 2. Pick a DMARC policy. none, quarantine, or reject.
- 3. Optional DKIM p=. Otherwise a placeholder.
- 4. Copy TXT values. Publish them at your DNS host. This tab does not query DNS.
About this tool
SPF, DMARC, and DKIM are TXT records. This tool writes the strings so you can paste them into DNS. It does not look up existing records or validate that mail actually flows.
Start with p=none
DMARC reject without aligned DKIM/SPF will drop mail.
DKIM
The selector record needs a real public key. The placeholder is not publishable.
Code examples
SPF
v=spf1 include:_spf.google.com -all