SPF, DKIM, DMARC fix card

Email Auth Rescue Card

Paste your domain, email host, and sending tools. Get a same-day public-DNS card with exact SPF and DMARC changes, current records, and verification commands.

No passwords. No DNS login. No inbox access. No deliverability guarantee.

example.com Action needed
MX Google Workspace
SPF missing sender include
DMARC not found
TXT _dmarc v=DMARC1; p=none

Built for the annoying email-auth failure

  • Gmail or Yahoo says the sender is unauthenticated
  • Receipts, proposals, onboarding, or newsletters land in spam
  • You added Resend, Postmark, Mailchimp, Shopify, or another sender and SPF is now messy
  • You need a copy-paste DNS card, not a sales call

What you get

  • MX, SPF, DMARC, MTA-STS, TLS-RPT, BIMI, and common DKIM selector readout
  • SPF lookup-count estimate and missing include notes
  • Exact suggested SPF and DMARC TXT records when public DNS shows a gap
  • Verification commands and header checks for after propagation

Sample output

What the card looks like

# Email Auth Rescue Card: example.com

## What To Change

### SPF
Create or replace the root TXT SPF record:
v=spf1 include:_spf.google.com include:amazonses.com ~all

### DMARC
Create TXT at _dmarc.example.com:
v=DMARC1; p=none; rua=mailto:dmarc@example.com; adkim=s; aspf=s

## Verify After DNS Changes
dig TXT example.com +short
dig TXT _dmarc.example.com +short

Get the card before changing DNS

The checkout asks for domain, email host, and sending tools or bounce text. The report is generated from public DNS and delivered to the checkout email.

Buy the $9 DNS fix card