DNS & Email Security Tools
Check, validate, and fix your DNS records for email authentication. All tools are free; no useful checker is hidden behind a paid tier.
Free Email Security Checkers
SPF Checker
Validate SPF syntax, lookup count, includes, redirects, and flattening risk.
DMARC Checker
Check DMARC policy, reports, and alignment context.
DKIM Checker
Discover selectors and validate published DKIM records.
SMTP TLS Checker
Test STARTTLS, certificate trust, hostname match, expiry, and FCrDNS.
MTA-STS Checker
Validate the DNS record and HTTPS MTA-STS policy file.
BIMI Checker
Validate default._bimi, SVG logo, VMC/CMC URL, and DMARC readiness.
Blacklist Checker
Check domain and mail-server DNSBL status alongside email authentication context.
FCrDNS Checker
Check PTR and forward-confirmed reverse DNS for mail servers.
Full Deliverability Test
Run DNS, email authentication, TLS, sender, and blacklist checks in one flow.
Free DNS Record Generators
SPF Record Generator
Build a valid SPF record for your domain. Add IP addresses, include third-party senders, and configure your SPF policy.
Open ToolDMARC Record Generator
Create a DMARC policy to protect your domain from spoofing. Configure reporting, policy enforcement, and alignment modes.
Open ToolMTA-STS Policy Generator
Generate MTA-STS TXT records and policy files to enforce TLS encryption for inbound email delivery.
Open ToolBIMI Record Checker & Generator
Create default._bimi TXT records and verify logo, VMC/CMC, and DMARC readiness for supported email clients.
Open ToolTLS-RPT Record Generator
Create an _smtp._tls TXT record so you can receive SMTP TLS failure reports before enforcing MTA-STS.
Open ToolMore Free Tools
Email Deliverability Tester
Send a test email and get a full deliverability analysis with AI-assisted suggestions.
Google & Yahoo Requirements Checker
Check if your domain meets the latest Google and Yahoo sender requirements.
Security Badge Generator
Generate an embeddable security score badge for your website or README.
Why Use DNS Record Generators?
DNS records for email authentication (SPF, DKIM, DMARC, MTA-STS, BIMI) follow strict syntax rules. A single typo can break your email deliverability or leave your domain vulnerable to spoofing attacks.
Our free generators create syntactically correct records that you can copy directly into your DNS provider. Each tool includes validation, best-practice defaults, and links to our in-depth guides for further reading.
After generating your records, use our DNS scanner to verify they are correctly published and configured. For a complete email setup audit, try the Email Deliverability Tester.