SPF, DKIM, DMARC fix card
Email Auth Rescue Card
Paste your domain, email host, and sending tools. Get a same-day public-DNS card with exact SPF and DMARC changes, current records, and verification commands.
No passwords. No DNS login. No inbox access. No deliverability guarantee.
example.com
Action needed
MX
Google Workspace
SPF
missing sender include
DMARC
not found
TXT _dmarc
v=DMARC1; p=none
Built for the annoying email-auth failure
- Gmail or Yahoo says the sender is unauthenticated
- Receipts, proposals, onboarding, or newsletters land in spam
- You added Resend, Postmark, Mailchimp, Shopify, or another sender and SPF is now messy
- You need a copy-paste DNS card, not a sales call
What you get
- MX, SPF, DMARC, MTA-STS, TLS-RPT, BIMI, and common DKIM selector readout
- SPF lookup-count estimate and missing include notes
- Exact suggested SPF and DMARC TXT records when public DNS shows a gap
- Verification commands and header checks for after propagation
Sample output
What the card looks like
# Email Auth Rescue Card: example.com
## What To Change
### SPF
Create or replace the root TXT SPF record:
v=spf1 include:_spf.google.com include:amazonses.com ~all
### DMARC
Create TXT at _dmarc.example.com:
v=DMARC1; p=none; rua=mailto:dmarc@example.com; adkim=s; aspf=s
## Verify After DNS Changes
dig TXT example.com +short
dig TXT _dmarc.example.com +short
Get the card before changing DNS
The checkout asks for domain, email host, and sending tools or bounce text. The report is generated from public DNS and delivered to the checkout email.
Buy the $9 DNS fix card