Email Security
Can strangers send email as your domain? Check SPF, DMARC, MX, and DKIM — then generate the records that fix it.
Generate the records
Paste these into your DNS (Cloudflare: DNS → Records → Add record). Changes take effect within minutes.
TXT · name @
v=spf1 -all
SPF hard fail — no server anywhere is authorized to send
TXT · name _dmarc
v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s;
Reject anything failing auth; sp=reject covers subdomains
MX · name @ · priority 0
.
Null MX (RFC 7505) — no mail accepted, senders fail fast
TXT · name *._domainkey
v=DKIM1; p=
Empty DKIM policy for every selector — nothing can be validly signed