Description
InboxAuth helps protect your domain from email spoofing, phishing, and unauthorized email senders with a guided email authentication setup. The plugin scans your domain’s SPF, DKIM, and DMARC DNS records to identify missing configurations, authentication issues, and potential security gaps. Whether you manage a business website, an online store, or a WordPress-powered service, InboxAuth makes it easier to understand and improve your domain’s email security.
Protect Your Domain from Email Spoofing
Without properly configured email authentication, attackers may be able to send fraudulent emails that appear to come from your domain. These spoofed emails can be used for phishing attacks, impersonation, and email-based scams that damage your brand reputation and undermine customer trust. InboxAuth helps you identify weaknesses in your email authentication setup and guides you toward configuring SPF, DKIM, and DMARC records to reduce the risk of domain spoofing and unauthorized email use.
Improve Email Deliverability and Domain Reputation
Properly configured email authentication can help legitimate emails reach recipients more reliably while reducing opportunities for attackers to impersonate your domain. InboxAuth is designed for website owners, developers, businesses, and WordPress administrators who want a simpler way to check SPF, DKIM, and DMARC records, troubleshoot email authentication issues, and improve their domain’s email security. Take control of your domain’s email authentication with InboxAuth and build a stronger foundation for secure, trustworthy email communication.
- DNS Scan — checks your current SPF, DKIM, and DMARC records.
- Connect Mailbox — validates an IMAP connection to a
reports@yourdomain.com
mailbox that will receive DMARC aggregate reports. - Set DMARC — walks you through publishing a starter DMARC record
(p=none,rua=mailto:reports@yourdomain.com) so reports start flowing in. - Observer Mode — runs a 48-hour window, then automatically parses every DMARC
aggregate report received via IMAP to build a list of everyone sending mail as
your domain. - Generate Records — once you’ve confirmed which senders are legitimate, generates
a tailored SPF record plus a DMARC record with your choice ofquarantineor
reject enforcement, and validates both live via DNS.
The Dashboard gives an at-a-glance view of SPF/DKIM/DMARC status, an overall Email
Security Score, a one-click re-scan, and a link to test whether your domain can
currently be spoofed via the companion Email Authenticity Checker tool.
Requirements
- PHP’s
imapextension enabled (for Step 2 / Step 4 mailbox access) - PHP’s
zipextension enabled (Step 4 unpacks .zip-attached DMARC reports) - Outbound DNS resolution available to the server (standard on virtually all hosts)
Screenshots
Installation
- Upload the plugin zip file via PLUGINS > ADD NEW in your wp-admin.
- Activate the plugin.
- Go to Email Authenticity Checker Dashboard to begin, located on sidebar menu item within wp-admin.
FAQ
-
Can InboxAuth prevent email spoofing?
-
InboxAuth helps identify email authentication gaps and guides you through configuring SPF, DKIM, and DMARC. Correctly configured authentication records, particularly an appropriate DMARC policy, can significantly reduce the risk of unauthorized senders impersonating your domain.
-
What if I don’t have IMAP access to a reports@ mailbox?
-
Step 2 requires a real mailbox at
reports@yourdomain.comsince DMARC aggregate
reports are delivered as email attachments. Most hosting control panels let you
create one in a couple of clicks. -
Is configuring SPF and DKIM enough to protect my domain?
-
SPF and DKIM are important parts of email authentication, but they do not replace DMARC. DMARC adds domain alignment checks and a policy that helps receiving mail servers handle messages that fail authentication. For stronger protection against email spoofing, configure all three correctly.
-
Can InboxAuth improve email deliverability?
-
Properly configured SPF, DKIM, and DMARC records can improve email authentication and help legitimate messages meet receiving providers’ requirements. InboxAuth helps identify configuration issues that may affect authentication. However, inbox placement also depends on sender reputation, recipient engagement, email content, and other factors.
-
Do I need technical knowledge to use InboxAuth?
-
InboxAuth is designed to simplify email authentication for WordPress website owners and administrators. Its guided setup helps you understand your domain’s SPF, DKIM, and DMARC configuration and identify the changes needed to improve email security.
-
Is InboxAuth useful if I use a third-party email service?
-
Yes. If you send emails through a business email provider, email marketing platform, or transactional email service, SPF, DKIM, and DMARC configuration can help authenticate messages sent using your domain. Ensure your DNS records correctly reflect your authorized sending services.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“InboxAuth – Email Security, Setup SPF / DKIM, DMARC & Check Email Authenticity” is open source software. The following people have contributed to this plugin.
Contributors
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.1
- Added setup tutorial video
1.0.0
- Initial release.