Generate RFC-compliant email security and DNS zone records with copy-ready BIND declarations.
Execution runs 100% locally inside the browser sandbox using HTML5 Canvas, Web Cryptography Subtle API, and Web Workers. Zero egress.
Zero network latency. Operates completely offline with zero dependencies on third-party backend servers or cloud services.
Built according to official RFC specifications, cryptographic test vectors, and enterprise-grade data transformation standards.
Type your domain name (e.g. example.com).
Choose DMARC, SPF, MX, or DKIM.
Select enforcement mode (e.g. p=reject for DMARC) and copy the DNS TXT record value.
DMARC prevents phishing attacks by verifying that sender addresses match authenticated SPF and DKIM signatures, boosting email inbox deliverability.
~all indicates SoftFail (accept but flag non-matching mail), while -all indicates HardFail (strictly reject unauthorized mail).
Zero-egress companion tools in the Developer Tools suite
Format, validate, repair, and minify JSON data instantly.
Decode, verify claims, inspect headers, and check token expiry.
Test regex patterns with flags, group captures, and live matches.
Compare text or source code side-by-side with visual diffs.
