Free DNS tools
Check and build email DNS records.
Inspect public MX, SPF, DKIM, and DMARC records, then generate conservative starter records for Help4 DNS. No mailbox password, private key, or Help4 account is required.
Do not guess email senders. One incorrect SPF or DMARC record can block legitimate mail. Inventory every service that sends as your domain before moving from monitoring to enforcement.
Public email DNS checker
Your mail provider supplies this name.
Checks query Google's public DNS-over-HTTPS endpoint for public DNS records only. Help4 does not request mailbox credentials or DKIM private keys.
MXNot checked
SPFNot checked
DKIMEnter a selector
DMARCNot checked
SPF starter generator
Select every system that sends mail using your domain. Help4 generates one SPF record; never publish multiple SPF TXT records at the same hostname.
Generated SPF
Name
@Type
TXTValue
DMARC starter generator
Generated DMARC
Name
_dmarcType
TXTValue
Safe rollout: publish SPF and DKIM first, monitor DMARC reports, then move gradually from
p=none to quarantine and reject only after every legitimate sender aligns.Common provider recipes
| Provider | SPF starting point | DKIM | Important |
|---|---|---|---|
| Google Workspace | include:_spf.google.com | TXT at the selector supplied in Google Admin | Generate a 2048-bit key where supported, publish it, then start authentication in Google Admin. |
| Microsoft 365 | include:spf.protection.outlook.com | Two provider-supplied CNAME records | Use the exact tenant-specific targets shown in Microsoft 365. |
| cPanel / website forms | ip4:SERVER_IP and provider includes as needed | Use Email Deliverability in cPanel | The website IP belongs in SPF only if that server actually sends mail for the domain. |
| Marketing platform | Use the vendor's current include if required | Prefer aligned custom-domain DKIM | Do not add a vendor merely because it receives mail or hosts a website. |