Awe CheckFree tool
SPF, DMARC, CAA and MTA-STS record generator
Tick the services that send mail from your domain, pick how strict DMARC should be and get ready DNS records. Your email lands in spam less often and your domain is harder to forge.
- Free
- No sign-up
- Runs in your browser
Questions and answers
What are SPF and DMARC?
SPF lists the servers allowed to send mail as your domain. DMARC tells mail providers what to do with messages that fail and sends you reports. Together they stop domain forgery and improve delivery.
Why does it matter since 2024?
Gmail and Yahoo reject bulk mail from domains without SPF, DKIM and DMARC. Without the records, customer emails land in spam.
Which DMARC policy should I pick?
Start with p=none and collect reports for 2–4 weeks. Once every legitimate sender passes, move to quarantine and then reject.
What about DKIM?
The DKIM key comes from your mail service (Google, Yandex, SendGrid and others) in its console and is added to DNS separately. This generator cannot create it because every service has its own key.
What are CAA and MTA-STS?
CAA names the certificate authorities allowed to issue for the domain. MTA-STS makes mail servers deliver to you only over an encrypted channel.
How do I verify the result?
Run a site check in Awe Check: the SPF, DMARC, CAA and MTA-STS items show what is visible in DNS.
Keep reading
Check your email and domain protection
In a minute Awe Check tests SPF, DMARC, CAA, domain expiry, HTTPS and headers.