DNS Record Generator
Generate SPF, DKIM and DMARC email DNS records online and verify them directly in your browser.
浏览器生成的密钥适合测试使用。
How to Use
Generate Records
- Enter your sending domain and outbound IP address
- Optionally customize DKIM selector (default
mail) and DMARC policy (rejectrecommended) - Click “Generate DNS Records” — the tool generates a complete set of email DNS records
- Click “Copy All Records” to paste into your DNS provider
- Save the DKIM private key (download or copy)
Verify Records
- Switch to the “Verify Records” tab
- Enter the configured domain, outbound IP and DKIM selector
- Click “Check DNS Configuration”
- The tool performs 7 real-time checks via Google DNS and reports PASS/FAIL for each
Generated Records
Each domain produces 6 DNS records:
| Type | Hostname | Description |
|---|---|---|
| A | <domain> | Bare domain resolves to outbound IP |
| A | mail.<domain> | Mail subdomain resolves to outbound IP |
| MX | <domain> | Mail exchange points to mail.<domain> |
| TXT | <domain> | SPF allowlist |
| TXT | <selector>._domainkey.<domain> | DKIM public key |
| TXT | _dmarc.<domain> | DMARC policy |
Verification Checks
7 checks are performed (aligned with gen-dns-auth check):
| Check | Description |
|---|---|
| A (domain) | Domain A record should resolve to outbound IP |
| A (mail) | mail.<domain> A record should resolve to outbound IP |
| MX | MX record should point to mail.<domain> |
| SPF | TXT record should start with v=spf1 |
| DKIM | TXT record should start with v=DKIM1 |
| DMARC | TXT record should contain v=DMARC1 |
| PTR | Reverse DNS of IP should return domain or mail.<domain> |