SPF & DMARC Generator

Generate the exact DNS records that stop attackers spoofing email from your domain.

Your domain

Email provider

DMARC enforcement

TXTName: @ (root)

v=spf1 include:_spf.google.com ~all

Tells the world which servers may send email for your domain.

TXTName: _dmarc

v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.co.zw; fo=1; adkim=s; aspf=s

Tells receivers what to do with email that fails SPF/DKIM.

How to use these

Add both as TXT records in your domain's DNS panel (e.g. name.co.zw → DNS → TXT). Start DMARC on p=none to monitor for a week or two, then move to quarantine. If you also use a separate provider (newsletters, CRM), add their include: to the SPF record before ~all.

Not sure these are right for your setup? We'll configure email security for you as part of a free assessment.

Get help setting this up