-->
Email & domain authentication

Every DNS record your domain needs to stop being spoofed.

Enter a domain and generate SPF, DKIM, DMARC, BIMI, MTA-STS, TLS-RPT and CAA records — including a fresh DKIM keypair — generated entirely in your browser. Nothing is sent anywhere.

$
Enter a valid domain, like example.com
2048-bit RSA keypair generated locally when you click Generate.
Leave blank to skip — BIMI needs SVG Tiny PS logo hosting.
ZONE PREVIEW — generated live, nothing leaves your browser

Your records

These are ready-to-publish templates based on the options you set — review the sending sources and report addresses before adding them to your DNS. The DKIM private key never leaves this page; store it in your mail server's DKIM configuration and delete the downloaded copy afterward. MTA-STS also requires hosting the policy file at https://mta-sts.yourdomain.com/.well-known/mta-sts.txt.

Take it further

Tools that pair well with these records

A few services we point people to once their DNS is in order — for monitoring, hosting, and staying on top of deliverability.

CLOUDE CODE VPS HOSTING
Self-Managed

Claude Code reads files, rewrites code, runs shell commands and loops until the job is done. It needs a real VPS environment. Not a laptop that sleeps, or a cloud function that times out.

From $4.99/mo
Visit site
Hermes Agent VPS HOSTING
Self-Managed

Deploy Hermes Agent on a self-managed VPS in one click, with persistent memory, reusable skills and always-on agent workflows.

From from $4.69/mo
Visit site
SSL Certificates
SSLs.com

SSLs.com is making the web more secure space with its wide range of cheap SSL certificates, complete with easy activation, installation, and great customer service.

From $39.75/yr
Visit site

Disclosure: these are affiliate links — we may earn a commission if you sign up, at no extra cost to you. Swap in your own links and copy before publishing.