Your business email lands in spam. Here's the fix.

Invoices in junk folders. Quotes nobody saw. Newsletters that quietly reach half your list. The usual cause isn't your writing — it's three DNS records called SPF, DKIM and DMARC that were never set up, or were set up wrong. This wizard builds yours.

Free to run. No email, no account, nothing leaves your browser. The kit is for the click-by-click detail.

How it works

Three records stand between you and the spam folder

1

SPF — the guest list

One DNS record naming every service allowed to send as your domain. Miss a sender and its mail looks forged. Add too many and the record breaks entirely — there's a hard limit of 10 DNS lookups, and some senders secretly use half of it.

2

DKIM — the signature

Each platform signs your mail with a key published in your DNS. No signature, no proof the message really came from you — and unlike SPF, the signature survives forwarding.

3

DMARC — the bouncer

Your published policy for mail that fails the first two checks — but only after a monitoring stage shows you everyone's passing. Skip the stages and you can block your own invoices.

Since 2024, Google and Yahoo require authentication from bulk senders, and since May 2025 Microsoft rejects non-compliant high-volume mail to Outlook.com outright (error 550 5.7.515). But you don't need to be a bulk sender to lose mail to spam — unauthenticated small-business mail gets filtered every day. The wizard below builds the same records the big senders are required to have.

Free domain checker

Check your domain — free

Start with the truth about your current setup. Enter your domain and this checker reads your live SPF, DKIM and DMARC records straight from DNS — the same records receiving servers judge your mail by — and tells you in plain English what's working and what's broken.

Free. No email, no account, nothing stored — the lookup runs in your browser against public DNS. Found a problem? The wizard right below builds the corrected records for your exact senders.

Loading the wizard…

General information about email authentication standards (SPF: RFC 7208, DKIM: RFC 6376, DMARC: RFC 7489) and provider requirements. See the disclaimer.

The Email Authentication Kit

The wizard gives you the records. The kit gets them live.

The free wizard above writes your records. The kit is the follow-through: exact clicks in your registrar's panel, how to read the reports DMARC sends you, deep guides per sender, and what to do when mail still lands in spam after everything passes.

Included in the $29 Email Authentication Kit

Registrar click-by-click guides

The exact screens and field names for Cloudflare, GoDaddy, Namecheap and Squarespace — including each host's trap: GoDaddy's doubled host names, Cloudflare's proxied-CNAME problem, and how to find where your DNS actually lives.

Get the Authentication Kit
Included in the $29 Email Authentication Kit

Read your first DMARC report

DMARC reports arrive as unreadable XML. This guide translates one line by line: which senders should be there, which shouldn't, what "alignment" looks like when it's working, and the exact signs that say you're safe to move from p=none to p=reject.

Get the Authentication Kit
Included in the $29 Email Authentication Kit

Per-sender deep guides

The full setup for each platform in the wizard — Google Workspace, Microsoft 365, Zoho, Mailchimp, SendGrid, Kit, CRMs and website forms — with the failure modes each one is known for and how to confirm it's really working, not just published.

Get the Authentication Kit
Included in the $29 Email Authentication Kit

Spam-folder triage flow

Everything passes and mail STILL lands in spam? Work this flow in order: the checks that separate an authentication problem from a reputation problem from a content problem — and what actually fixes each one.

Get the Authentication Kit
Included in the $29 Email Authentication Kit

SPF lookup surgery

Over the 10-lookup limit? The two real fixes, worked through: moving senders to subdomains, and SPF flattening — what it is, when it's safe, and the maintenance it obliges you to. Plus the sender-inventory method that stops the count creeping back up.

Get the Authentication Kit
Included in the $29 Email Authentication Kit

Printable setup worksheet

A one-page worksheet for the whole job: your sender inventory, the records you published, where each platform confirmed, and your DMARC stage dates — so the next person (or future you) never has to reverse-engineer it.

Get the Authentication Kit

One-time purchase

Get the Email Authentication Kit

$29 one-time

Registrar click-by-click guides, the DMARC report reader, per-sender deep guides, SPF lookup surgery, the spam-folder triage flow, and the printable setup worksheet. The same job freelancers charge $129–$299 to do by hand — done by you, in an afternoon, without handing anyone your DNS password.

Get the Authentication Kit — $29

Secure checkout. After payment you'll be redirected to your private kit page. One payment, yours to keep.

FAQ

Straight answers

Will this get my email out of spam?

Honestly: it fixes the authentication layer — which is the most common mechanical cause, and the one the mailbox providers themselves tell you to fix first. If your SPF, DKIM and DMARC are missing or broken, receivers have no way to verify your mail is really from you, and spam folders are the default. Authentication doesn't fix everything (a damaged sender reputation or spammy content are different problems — that's what the kit's triage flow is for), but nothing else works properly until authentication does.

I'm not technical. Can I actually do this?

Yes — that's who this is built for. The work is copying records the wizard writes for you into your domain panel, following steps in the right order. Every record here was checked against the live DNS data and the platforms' own setup screens, and the kit's registrar guides show the exact fields to fill in. If you can update your website's text, you can do this.

Why not just hire someone on Fiverr?

Plenty of people do — the top sellers in this category have thousands of completed orders at $45–$295 each. The catch: they need access to your DNS and your email platforms to do the work, which means handing a stranger the keys to your domain. This kit costs less than the cheapest tier and you never share a password with anyone.

What if I already have an SPF record?

Most businesses do — and it's often the problem. Your domain can only have ONE SPF record; a second one breaks it. The wizard builds the single merged record containing every sender you use. If one already exists, you edit it to match rather than adding another. The wizard also counts your DNS lookups, because a record stuffed past the 10-lookup limit fails even though it "looks" complete.

Do I need DMARC at p=reject right away?

No — and doing that on day one is a real way to break your own email. The mailbox providers' bulk-sender rules accept p=none. The right path is stages: monitor with p=none while reports prove every sender passes, then quarantine, then reject. The wizard prints all three records; the kit teaches you to read the reports that tell you when it's safe to move up.

I only send a few emails a day. Do the 2024/2025 rules even apply to me?

The formal bulk-sender thresholds (5,000 messages a day) may not — though the count includes every platform sending as your domain, and crossing it once makes the classification permanent. But the rules aren't the only reason: Gmail, Outlook and Yahoo filter unauthenticated mail from senders of every size, and the same records protect your domain from being spoofed by strangers. Small senders get the deliverability benefit immediately; the compliance is a bonus.

What's actually in the $29 kit?

Click-by-click record-pasting guides for Cloudflare, GoDaddy, Namecheap and Squarespace; a plain-English guide to reading your first DMARC report; deep setup guides for Google Workspace, Microsoft 365, Zoho, Mailchimp, SendGrid, Kit, CRMs and website forms; SPF lookup surgery for domains over the 10-lookup limit; a spam-folder triage flow for mail that still lands in junk after authentication; and a printable setup worksheet.

What happens after I pay?

One payment of $29, and you're redirected straight to your private kit page — no account to create, no login to remember. Bookmark it; it's yours to keep.

Free Guides

Email deliverability guides

Plain-English guides to the problems that send business email to spam — and the records that fix them.

All nine guides are also collected on the Free Guides page.