SPF, DKIM & DMARC record generator
Pick your sending domain and provider and get the exact DNS TXT records to add — provider-accurate SPF, a DMARC policy you control, and step-by-step DKIM setup. Free, private, no signup.
100% client-side — nothing leaves your browser. Add these as TXT records in your DNS. Start DMARC at p=none and tighten to quarantine, then reject.
yourdomain.comv=spf1 include:_spf.google.com ~allAdd at the root of your domain. Only ever publish ONE SPF record — merge includes if you send from multiple services.
_dmarc.yourdomain.comv=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com; fo=1; adkim=s; aspf=sAdd at the _dmarc subdomain host. adkim=s / aspf=s enforce strict alignment; loosen to r if you send from subdomains.
In the Google Admin console go to Apps > Google Workspace > Gmail > Authenticate email. Generate the DKIM key, then add the provided TXT record at host google._domainkey.<domain>.
Records are step one — placement depends on warmup, reputation and consistent sending. Autocloz monitors SPF/DKIM/DMARC and warms your mailboxes automatically.
Land in the inbox — start freeSPF, DKIM & DMARC FAQ
Is the SPF / DKIM / DMARC generator free?+
Yes — free, no signup, 100% client-side (nothing you type leaves your browser). It just assembles the correct records from your inputs.
What DMARC policy should I start with?+
Always start at p=none to monitor without affecting delivery. Once the DMARC reports show your legitimate mail passing, tighten to quarantine, then reject.
Why is there no full DKIM record to copy?+
DKIM keys are generated by your email provider and are unique to your domain. We give you the exact steps to get yours from Google, Microsoft 365, SES or SendGrid, then you publish the record they provide.
Authentication is half the battle.
Autocloz warms your mailboxes and watches SPF, DKIM and DMARC so your cold email actually lands in the inbox.