Fix SPF, DKIM and DMARC - Copy-Paste DNS Records for Your Domain

Built for operators & agencies

Live DNS - no cached APIs

No login required

No data retention

Privacy first diagnostics

Prevents blacklisting - not causes it

Emails going to spam? SPF, DKIM or DMARC broken? FixKit gives you the exact DNS records your domain needs - formatted for Cloudflare, Namecheap, Google Workspace and Microsoft 365. No guesswork.

build_circle FixKit - $29 one-time

Run the free domain scan, then unlock your personalized DNS fix bundle. Copy, paste, done.

SPF records DKIM setup DMARC enforcement List-Unsubscribe header Shareable PDF

build_circle Get FixKit - $29

Scan is free. Pay only when you want the fix.

info Misconfigured SPF, DKIM or DMARC can cause emails to land in spam without any error or bounce message. Gmail, Outlook and Apple Mail all evaluate these records silently. See our guide on why emails go to spam.

sound_detection_glass_break Run Free Domain Check First

What you get for $29

Everything a non-technical founder or marketer needs to fix broken email authentication in one afternoon.

SPF

Your exact SPF record - ready to paste

The full TXT record your domain needs, formatted for Cloudflare and Namecheap. Type, name, value, TTL - all filled in. No lookup limit surprises. See also: fixing emails going to spam.

DKIM

DKIM setup that Gmail and Outlook will accept

Provider-specific steps for Google Workspace, Microsoft 365, SendGrid and others. Includes the host name and value format so you paste the right thing the first time.

DMARC

DMARC record that actually protects your domain

Step-by-step path from p=none to real enforcement. Alignment notes and reporting setup included so you stop spoofing risk, not just monitor it. Related: fixing Google Postmaster reputation.

List-Unsubscribe

One-click unsubscribe header - paste and go

The exact mail header snippet Gmail and Yahoo now require for bulk senders. Reduces spam complaints and protects your sender reputation long term.

Multi-registrar

Cloudflare and Namecheap DNS snippets included

Records are formatted for both registrars - names, hosts, values and TTL all pre-filled. No translating generic advice into what your registrar actually wants.

PDF

Shareable PDF you can send to your team or dev

A clean recovery blueprint grouped by registrar and provider. Forward it to whoever manages your DNS and the job is done - no back and forth explaining what records to add.

Why domains lose inboxing, and how FixKit stops it

Capability	FixKit	Generic advice
DNS instructions	✅ Concrete names and values for popular registrars	❌ Vague notes with no place to paste
SPF guidance	✅ Include chain review and lookup count awareness	❌ No awareness of evaluation limits
DKIM setup	✅ Selector and record format written in simple steps	❌ Assumes a default selector without checks
DMARC path to protect	✅ Clear steps to move from monitor to protect	❌ Stays at monitor with no plan
List Unsubscribe	✅ Header snippet you can paste and test	❌ Mentions the header but no code

How it works

Run the Free Domain Scan. Takes 10 seconds. No account needed. You will see your SPF, DKIM, DMARC and List-Unsubscribe status instantly.
See your risk level. The results show Critical, At Risk, or Safe - so you know exactly how urgent the situation is and what is failing.
Click "Get FixKit" on the results page. You pay $29 once. No subscription, no recurring charges.
Get your personalized DNS records. Copy the SPF record, DKIM host and value, DMARC policy, and List-Unsubscribe header - all formatted for your registrar and provider.
Paste into your DNS panel and you are done. Wait 5-10 minutes for propagation, then re-run the free scan to confirm everything is green.

Frequently Asked Questions

Common questions before buying.

Do I need to be technical to use this? expand_more

No. The FixKit is built for founders, marketers and non-technical team members. Every record comes with the exact field names your registrar uses - you do not need to know what SPF or DKIM means, just copy the value and paste it in the right field. If you can update a DNS record, you can use this.

How long does it take to fix SPF, DKIM and DMARC? expand_more

Most people complete the DNS changes in under 20 minutes. After you paste the records, DNS propagation typically takes 5 to 30 minutes. Re-run the free checker after 10 minutes to confirm everything is passing. Full reputation recovery with providers like Gmail can take 24 to 72 hours, but the authentication fixes happen immediately.

Does FixKit work with Google Workspace and Microsoft 365? expand_more

Yes. The DKIM recipes include provider-specific steps for Google Workspace, Microsoft 365, SendGrid, Mailgun, Postmark and others. SPF records are also generated with the correct include for your detected provider so you do not have to look up the right value yourself.

Will fixing DNS records immediately stop emails going to spam? expand_more

Authentication fixes remove the most common technical reason emails go to spam. Once SPF, DKIM and DMARC are passing, providers re-evaluate your domain trust within 24 to 72 hours. If you were recently blacklisted or have a high complaint rate, you may need to address those separately - the FixKit will flag those situations in the results.

What registrars does the FixKit support? expand_more

Records are formatted for Cloudflare and Namecheap, which cover the majority of small business domains. The values themselves are standard DNS TXT records, so you can apply them in any registrar - GoDaddy, Google Domains, Porkbun, Route 53 - just using the appropriate field names for your panel.

Is there a refund if it does not work? expand_more

Yes. If you apply the records and still fail the free scan within 7 days, contact us and we will either fix the issue or refund you. The FixKit is domain-specific - we stand behind the output for your exact domain.