Title: InboxAuth – Email Security, Setup SPF / DKIM, DMARC & Check Email Authenticity Author: WP Encryption SSL Published: ستمبر 1, 2026 Last modified: اکتوبر 9, 2026 --- Search plugins ![](https://ps.w.org/inboxauth-email-authenticity/assets/banner-772x250.png?rev= 3676590) ![](https://ps.w.org/inboxauth-email-authenticity/assets/icon-256x256.png?rev=3676590) # InboxAuth – Email Security, Setup SPF / DKIM, DMARC & Check Email Authenticity By [WP Encryption SSL](https://profiles.wordpress.org/gowebsmarty/) [Download](https://downloads.wordpress.org/plugin/inboxauth-email-authenticity.1.0.1.zip) * [Details](https://bcc.wordpress.org/plugins/inboxauth-email-authenticity/#description) * [Reviews](https://bcc.wordpress.org/plugins/inboxauth-email-authenticity/#reviews) * [Installation](https://bcc.wordpress.org/plugins/inboxauth-email-authenticity/#installation) * [Development](https://bcc.wordpress.org/plugins/inboxauth-email-authenticity/#developers) [Support](https://wordpress.org/support/plugin/inboxauth-email-authenticity/) ## Description InboxAuth helps protect your domain from email spoofing, phishing, and unauthorized email senders with a guided email authentication setup. The plugin scans your domain’s SPF, DKIM, and DMARC DNS records to identify missing configurations, authentication issues, and potential security gaps. Whether you manage a business website, an online store, or a WordPress-powered service, InboxAuth makes it easier to understand and improve your domain’s email security. ### Protect Your Domain from Email Spoofing Without properly configured email authentication, attackers may be able to send fraudulent emails that appear to come from your domain. These spoofed emails can be used for phishing attacks, impersonation, and email-based scams that damage your brand reputation and undermine customer trust. InboxAuth helps you identify weaknesses in your email authentication setup and guides you toward configuring SPF, DKIM, and DMARC records to reduce the risk of domain spoofing and unauthorized email use. ### Improve Email Deliverability and Domain Reputation Properly configured email authentication can help legitimate emails reach recipients more reliably while reducing opportunities for attackers to impersonate your domain. InboxAuth is designed for website owners, developers, businesses, and WordPress administrators who want a simpler way to check SPF, DKIM, and DMARC records, troubleshoot email authentication issues, and improve their domain’s email security. Take control of your domain’s email authentication with InboxAuth and build a stronger foundation for secure, trustworthy email communication. 1. **DNS Scan** — checks your current SPF, DKIM, and DMARC records. 2. **Connect Mailbox** — validates an IMAP connection to a `reports@yourdomain.com` mailbox that will receive DMARC aggregate reports. 3. **Set DMARC** — walks you through publishing a starter DMARC record (`p=none`,` rua=mailto:reports@yourdomain.com`) so reports start flowing in. 4. **Observer Mode** — runs a 48-hour window, then automatically parses every DMARC aggregate report received via IMAP to build a list of everyone sending mail as your domain. 5. **Generate Records** — once you’ve confirmed which senders are legitimate, generates a tailored SPF record plus a DMARC record with your choice of `quarantine` or reject enforcement, and validates both live via DNS. The Dashboard gives an at-a-glance view of SPF/DKIM/DMARC status, an overall Email Security Score, a one-click re-scan, and a link to test whether your domain can currently be spoofed via the companion Email Authenticity Checker tool. #### Requirements * PHP’s `imap` extension enabled (for Step 2 / Step 4 mailbox access) * PHP’s `zip` extension enabled (Step 4 unpacks .zip-attached DMARC reports) * Outbound DNS resolution available to the server (standard on virtually all hosts) ## Screenshots [⌊Dashboard page with email security score and SPF, DKIM, DMARC status⌉⌊Dashboard page with email security score and SPF, DKIM, DMARC status⌉[ Dashboard page with email security score and SPF, DKIM, DMARC status [⌊Setup Wizard⌉⌊Setup Wizard⌉[ Setup Wizard [⌊Configure a mailbox to receive rua reports for each sent email⌉⌊Configure a mailbox to receive rua reports for each sent email⌉[ Configure a mailbox to receive rua reports for each sent email [⌊48 Hours observer window to analyze who are sending emails from your @domain.com⌉⌊ 48 Hours observer window to analyze who are sending emails from your @domain.com⌉[ 48 Hours observer window to analyze who are sending emails from your @domain.com [⌊Analyze all the senders from 48 hours window and choose only the legitimate senders⌉⌊ Analyze all the senders from 48 hours window and choose only the legitimate senders⌉[ Analyze all the senders from 48 hours window and choose only the legitimate senders [⌊Generate SPF & DMARC records based on chosen senders and add it to your domain DNS records⌉⌊Generate SPF & DMARC records based on chosen senders and add it to your domain DNS records⌉[ Generate SPF & DMARC records based on chosen senders and add it to your domain DNS records ## Installation 1. Upload the plugin zip file via PLUGINS > ADD NEW in your wp-admin. 2. Activate the plugin. 3. Go to **Email Authenticity Checker Dashboard** to begin, located on sidebar menu item within wp-admin. ## FAQ ### Can InboxAuth prevent email spoofing? InboxAuth helps identify email authentication gaps and guides you through configuring SPF, DKIM, and DMARC. Correctly configured authentication records, particularly an appropriate DMARC policy, can significantly reduce the risk of unauthorized senders impersonating your domain. ### What if I don’t have IMAP access to a reports@ mailbox? Step 2 requires a real mailbox at `reports@yourdomain.com` since DMARC aggregate reports are delivered as email attachments. Most hosting control panels let you create one in a couple of clicks. ### Is configuring SPF and DKIM enough to protect my domain? SPF and DKIM are important parts of email authentication, but they do not replace DMARC. DMARC adds domain alignment checks and a policy that helps receiving mail servers handle messages that fail authentication. For stronger protection against email spoofing, configure all three correctly. ### Can InboxAuth improve email deliverability? Properly configured SPF, DKIM, and DMARC records can improve email authentication and help legitimate messages meet receiving providers’ requirements. InboxAuth helps identify configuration issues that may affect authentication. However, inbox placement also depends on sender reputation, recipient engagement, email content, and other factors. ### Do I need technical knowledge to use InboxAuth? InboxAuth is designed to simplify email authentication for WordPress website owners and administrators. Its guided setup helps you understand your domain’s SPF, DKIM, and DMARC configuration and identify the changes needed to improve email security. ### Is InboxAuth useful if I use a third-party email service? Yes. If you send emails through a business email provider, email marketing platform, or transactional email service, SPF, DKIM, and DMARC configuration can help authenticate messages sent using your domain. Ensure your DNS records correctly reflect your authorized sending services. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “InboxAuth – Email Security, Setup SPF / DKIM, DMARC & Check Email Authenticity” is open source software. The following people have contributed to this plugin. Contributors * [ WP Encryption SSL ](https://profiles.wordpress.org/gowebsmarty/) [Translate “InboxAuth – Email Security, Setup SPF / DKIM, DMARC & Check Email Authenticity” into your language.](https://translate.wordpress.org/projects/wp-plugins/inboxauth-email-authenticity) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/inboxauth-email-authenticity/), check out the [SVN repository](https://plugins.svn.wordpress.org/inboxauth-email-authenticity/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/inboxauth-email-authenticity/) by [RSS](https://plugins.trac.wordpress.org/log/inboxauth-email-authenticity/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.1 * Added setup tutorial video #### 1.0.0 * Initial release. ## Meta * Version **1.0.1** * Last updated **1 day ago** * Active installations **10+** * WordPress version ** 5.8 or higher ** * Tested up to **7.1.3** * PHP version ** 7.0 or higher ** * Language * [English (US)](https://wordpress.org/plugins/inboxauth-email-authenticity/) * Tags * [DKIM](https://bcc.wordpress.org/plugins/tags/dkim/)[DMARC](https://bcc.wordpress.org/plugins/tags/dmarc/) [email security](https://bcc.wordpress.org/plugins/tags/email-security/)[SPF](https://bcc.wordpress.org/plugins/tags/spf/) * [Advanced View](https://bcc.wordpress.org/plugins/inboxauth-email-authenticity/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/inboxauth-email-authenticity/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/inboxauth-email-authenticity/reviews/) ## Contributors * [ WP Encryption SSL ](https://profiles.wordpress.org/gowebsmarty/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/inboxauth-email-authenticity/)