Title: InboxAuth – Email Authenticity
Author: WP Encryption HTTPS
Published: <strong>Setyembre 1, 2026</strong>
Last modified: Setyembre 1, 2026

---

Search plugins

![](https://ps.w.org/inboxauth-email-authenticity/assets/banner-772x250.png?rev=
3676590)

![](https://ps.w.org/inboxauth-email-authenticity/assets/icon-256x256.png?rev=3676590)

# InboxAuth – Email Authenticity

 By [WP Encryption HTTPS](https://profiles.wordpress.org/gowebsmarty/)

[Download](https://downloads.wordpress.org/plugin/inboxauth-email-authenticity.1.0.0.zip)

 * [Details](https://ceb.wordpress.org/plugins/inboxauth-email-authenticity/#description)
 * [Reviews](https://ceb.wordpress.org/plugins/inboxauth-email-authenticity/#reviews)
 *  [Installation](https://ceb.wordpress.org/plugins/inboxauth-email-authenticity/#installation)
 * [Development](https://ceb.wordpress.org/plugins/inboxauth-email-authenticity/#developers)

 [Support](https://wordpress.org/support/plugin/inboxauth-email-authenticity/)

## Description

InboxAuth scans your domain’s SPF, DKIM, and DMARC records, then walks you through

a guided setup to close the gaps:

 1. **DNS Scan** — checks your current SPF, DKIM, and DMARC records.
 2. **Connect Mailbox** — validates an IMAP connection to a `reports@yourdomain.com`
    
    mailbox that will receive DMARC aggregate reports.
 3. **Set DMARC** — walks you through publishing a starter DMARC record
     (`p=none`,`
    rua=mailto:reports@yourdomain.com`) so reports start flowing in.
 4. **Observer Mode** — runs a 48-hour window, then automatically parses every DMARC
    
    aggregate report received via IMAP to build a list of everyone sending mail as 
    your domain.
 5. **Generate Records** — once you’ve confirmed which senders are legitimate, generates
    
    a tailored SPF record plus a DMARC record with your choice of `quarantine` or reject
    enforcement, and validates both live via DNS.

The Dashboard gives an at-a-glance view of SPF/DKIM/DMARC status, an overall Email

Security Score, a one-click re-scan, and a link to test whether your domain can 
currently be spoofed via the companion Email Authenticity Checker tool.

#### Requirements

 * PHP’s `imap` extension enabled (for Step 2 / Step 4 mailbox access)
 * PHP’s `zip` extension enabled (Step 4 unpacks .zip-attached DMARC reports)
 * Outbound DNS resolution available to the server (standard on virtually all hosts)

## Installation

 1. Upload the plugin zip file via PLUGINS > ADD NEW in your wp-admin.
 2. Activate the plugin.
 3. Go to **Email Authenticity Checker  Dashboard** to begin, located on sidebar menu
    item within wp-admin.

## FAQ

### What if I don’t have IMAP access to a reports@ mailbox?

Step 2 requires a real mailbox at `reports@yourdomain.com` since DMARC aggregate

reports are delivered as email attachments. Most hosting control panels let you 
create one in a couple of clicks.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“InboxAuth – Email Authenticity” is open source software. The following people have
contributed to this plugin.

Contributors

 *   [ WP Encryption HTTPS ](https://profiles.wordpress.org/gowebsmarty/)

[Translate “InboxAuth – Email Authenticity” into your language.](https://translate.wordpress.org/projects/wp-plugins/inboxauth-email-authenticity)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/inboxauth-email-authenticity/),
check out the [SVN repository](https://plugins.svn.wordpress.org/inboxauth-email-authenticity/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/inboxauth-email-authenticity/)
by [RSS](https://plugins.trac.wordpress.org/log/inboxauth-email-authenticity/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 1.0.0

 * Initial release.

## Meta

 *  Version **1.0.0**
 *  Last updated **2 days ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 5.8 or higher **
 *  Tested up to **7.1**
 *  PHP version ** 7.0 or higher **
 *  Language
 * [English (US)](https://wordpress.org/plugins/inboxauth-email-authenticity/)
 * Tags
 * [DKIM](https://ceb.wordpress.org/plugins/tags/dkim/)[DMARC](https://ceb.wordpress.org/plugins/tags/dmarc/)
   [email security](https://ceb.wordpress.org/plugins/tags/email-security/)[SPF](https://ceb.wordpress.org/plugins/tags/spf/)
 *  [Advanced View](https://ceb.wordpress.org/plugins/inboxauth-email-authenticity/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/inboxauth-email-authenticity/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/inboxauth-email-authenticity/reviews/)

## Contributors

 *   [ WP Encryption HTTPS ](https://profiles.wordpress.org/gowebsmarty/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/inboxauth-email-authenticity/)