WWPMailDesk
LoginFree Download Plugin
FREE EMAIL AUTHENTICATION TOOL

Email Authentication DNS Record Generator

Build copy-ready SPF, DMARC, DKIM, MTA-STS, TLS reporting and BIMI records without memorizing DNS syntax.

SPFDMARCDKIMMTA-STSTLS-RPTBIMI
SMTP TesterConnectivity & authentication Email AnalyzerInspect a received message Email Health CheckerDNS & reputation checks SMTP CapacityPlan sending throughput Warm-Up PlannerBuild a sending schedule Header AnalyzerRead raw email headers Spam Content CheckerReview message content Bounce & ComplaintMeasure campaign health Send-Time CalculatorEstimate campaign completion DNS GeneratorBuild authentication records
SENDING DOMAIN

Start with your sending domain

The domain is used only to build the DNS hostnames below. Nothing is sent to WPMailDesk.

SPF Builder

Define the systems allowed to send email for your domain.

TXT

SPF TXT record

Add at the root of the sending domain.

Host@TypeTXTValue

DMARC Builder

Choose enforcement, reporting and identifier alignment.

TXT

DMARC TXT record

Publish at the _dmarc hostname.

HostTypeTXTValue

DKIM Formatter

Paste the public key provided by the actual sending system.

TXT

DKIM TXT record

A selector-specific authentication hostname.

HostTypeTXTValue

MTA-STS Builder

Create the TXT signal for your hosted MTA-STS policy.

TXT
Policy URL:

MTA-STS TXT record

The TXT record announces the current policy version.

HostTypeTXTValue

TLS Reporting Builder

Receive aggregate reports about SMTP TLS delivery failures.

TXT

TLS-RPT TXT record

Publish under the SMTP TLS reporting hostname.

HostTypeTXTValue

BIMI Builder

Add your SVG logo URL and, when applicable, a certificate URL.

TXT

BIMI TXT record

Mailbox-provider requirements vary.

HostTypeTXTValue
DEPLOYMENT CHECKLIST

All generated DNS records

Review every generated hostname and value before publishing it with your DNS provider.

Important: This generator creates record syntax; it does not publish or verify live DNS. SPF should normally exist as one SPF policy per domain. DKIM requires the matching private key on the real sender. MTA-STS also requires a valid HTTPS policy file at the displayed policy URL.
Privacy: all values are generated locally in your browser. Your domain, public keys and reporting addresses are not submitted to WPMailDesk.

Turn customer email into an organized WordPress support desk.

Start with the free plugin, then upgrade when your team needs the complete ticketing, customer history, SMTP, inbox, and support workflow.

Get WPMailDesk →