InboxAuth helps protect your domain from email spoofing, phishing, and unauthorized email senders with a guided email authentication setup. The plugin scans your domain\u2019s SPF, DKIM, and DMARC DNS records to identify missing configurations, authentication issues, and potential security gaps. Whether you manage a business website, an online store, or a WordPress-powered service, InboxAuth makes it easier to understand and improve your domain\u2019s email security.<\/p>\n\n
Without properly configured email authentication, attackers may be able to send fraudulent emails that appear to come from your domain. These spoofed emails can be used for phishing attacks, impersonation, and email-based scams that damage your brand reputation and undermine customer trust. InboxAuth helps you identify weaknesses in your email authentication setup and guides you toward configuring SPF, DKIM, and DMARC records to reduce the risk of domain spoofing and unauthorized email use.<\/p>\n\n
Properly configured email authentication can help legitimate emails reach recipients more reliably while reducing opportunities for attackers to impersonate your domain. InboxAuth is designed for website owners, developers, businesses, and WordPress administrators who want a simpler way to check SPF, DKIM, and DMARC records, troubleshoot email authentication issues, and improve their domain\u2019s email security. Take control of your domain\u2019s email authentication with InboxAuth and build a stronger foundation for secure, trustworthy email communication.<\/p>\n\n
https:\/\/www.youtube.com\/watch?v=k9VUXMDQ9-s<\/p>\n\n
reports@yourdomain.com<\/code>\nmailbox that will receive DMARC aggregate reports.<\/li>\n- Set DMARC<\/strong> \u2014 walks you through publishing a starter DMARC record\n(
p=none<\/code>, rua=mailto:reports@yourdomain.com<\/code>) so reports start flowing in.<\/li>\n- Observer Mode<\/strong> \u2014 runs a 48-hour window, then automatically parses every DMARC\naggregate report received via IMAP to build a list of everyone sending mail as\nyour domain.<\/li>\n
- Generate Records<\/strong> \u2014 once you've confirmed which senders are legitimate, generates\na tailored SPF record plus a DMARC record with your choice of
quarantine<\/code> or\n reject enforcement, and validates both live via DNS.<\/li>\n<\/ol>\n\nThe Dashboard gives an at-a-glance view of SPF\/DKIM\/DMARC status, an overall Email\nSecurity Score, a one-click re-scan, and a link to test whether your domain can\ncurrently be spoofed via the companion Email Authenticity Checker tool.<\/p>\n\n
Requirements<\/h4>\n\n\n- PHP's
imap<\/code> extension enabled (for Step 2 \/ Step 4 mailbox access)<\/li>\n- PHP's
zip<\/code> extension enabled (Step 4 unpacks .zip-attached DMARC reports)<\/li>\n- Outbound DNS resolution available to the server (standard on virtually all hosts)<\/li>\n<\/ul>\n\n\n
\n- Upload the plugin zip file via PLUGINS > ADD NEW in your wp-admin.<\/li>\n
- Activate the plugin.<\/li>\n
- Go to Email Authenticity Checker \u2192 Dashboard<\/strong> to begin, located on sidebar menu item within wp-admin.<\/li>\n<\/ol>\n\n\n
\nCan InboxAuth prevent email spoofing?<\/h3><\/dt>\nInboxAuth helps identify email authentication gaps and guides you through configuring SPF, DKIM, and DMARC. Correctly configured authentication records, particularly an appropriate DMARC policy, can significantly reduce the risk of unauthorized senders impersonating your domain.<\/p><\/dd>\n
What if I don't have IMAP access to a reports@ mailbox?<\/h3><\/dt>\nStep 2 requires a real mailbox at reports@yourdomain.com<\/code> since DMARC aggregate\nreports are delivered as email attachments. Most hosting control panels let you\ncreate one in a couple of clicks.<\/p><\/dd>\nIs configuring SPF and DKIM enough to protect my domain?<\/h3><\/dt>\nSPF and DKIM are important parts of email authentication, but they do not replace DMARC. DMARC adds domain alignment checks and a policy that helps receiving mail servers handle messages that fail authentication. For stronger protection against email spoofing, configure all three correctly.<\/p><\/dd>\n
Can InboxAuth improve email deliverability?<\/h3><\/dt>\nProperly configured SPF, DKIM, and DMARC records can improve email authentication and help legitimate messages meet receiving providers' requirements. InboxAuth helps identify configuration issues that may affect authentication. However, inbox placement also depends on sender reputation, recipient engagement, email content, and other factors.<\/p><\/dd>\n
Do I need technical knowledge to use InboxAuth?<\/h3><\/dt>\nInboxAuth is designed to simplify email authentication for WordPress website owners and administrators. Its guided setup helps you understand your domain's SPF, DKIM, and DMARC configuration and identify the changes needed to improve email security.<\/p><\/dd>\n
Is InboxAuth useful if I use a third-party email service?<\/h3><\/dt>\nYes. If you send emails through a business email provider, email marketing platform, or transactional email service, SPF, DKIM, and DMARC configuration can help authenticate messages sent using your domain. Ensure your DNS records correctly reflect your authorized sending services.<\/p><\/dd>\n\n<\/dl>\n\n\n
1.0.1<\/h4>\n\n\n- Added setup tutorial video<\/li>\n<\/ul>\n\n
1.0.0<\/h4>\n\n\n- Initial release.<\/li>\n<\/ul>","raw_excerpt":"Protect your domain's email against email spoofing. Discover who's sending as you, then generate SPF\/DKIM\/DMARC records to stop spoofing \u2014 s \u2026","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/bcc.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/349319","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bcc.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/bcc.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/bcc.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=349319"}],"author":[{"embeddable":true,"href":"https:\/\/bcc.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/gowebsmarty"}],"wp:attachment":[{"href":"https:\/\/bcc.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=349319"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/bcc.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=349319"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/bcc.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=349319"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/bcc.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=349319"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/bcc.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=349319"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/bcc.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=349319"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}