SpamCipher Setup

Sets up your domain's SPF, DKIM and DMARC at your DNS host and mail provider, in your own browser, after one approval in SpamCipher.

SpamCipher Setup completes your domain's email authentication for you, at both your DNS host and your mail provider. No API keys to find, no DKIM records to copy, no settings to hunt for. BETA COVERAGE The beta sets up Google Workspace at the major domain registrars and DNS hosts. Your domain's page in SpamCipher shows whether yours is covered before you start. For any other provider, SpamCipher shows the records to add yourself. HOW IT WORKS 1. In SpamCipher, open your domain and press Set it all up. You'll see the full plan in plain words: what will be added at your DNS host, what will be turned on at your mail provider, and the final test message. 2. Press Start. The extension opens each provider's page in your browser, where you're already signed in, and completes the steps. A small panel shows its progress, with Pause and Stop. When a step needs you, such as a sign-in or password prompt, that tab comes forward and SpamCipher tells you it's your turn. 3. A step counts as done only once it's verified: your nameservers serve the record, the provider shows signing is on, and a real test message passes SPF, DKIM and DMARC. 4. Undo all reverses every change with one click. SAFE BY DESIGN - You handle sign-ins, two-step checks and password prompts yourself. The extension never reads or types passwords, payment details or one-time codes. - It never changes nameservers, DNSSEC, transfers, renewals, billing, purchases, contacts, users or roles. These are blocked by the extension itself, whatever a page says. - It only works on the sites your approved setup needs. Supported provider consoles are allowed at install; any other site needs your permission for that one setup, and access ends when the setup does. - It never goes outside the plan you approved. If a provider's page has changed, it can ask an AI model for a replacement step, using an outline of the page with your values, addresses, long numbers and codes removed. Every suggested step is checked against the same rules before it runs. If the outline isn't enough, it may ask you to click its icon to allow one screenshot of that page, with all fields and private details blacked out. No screenshot is taken without your click. - Any key it reads is sent once, encrypted, to your SpamCipher account. It is never stored in the extension or shown to an AI model. Requires a SpamCipher account (spamcipher.com).