{"id":349319,"date":"2026-09-01T07:32:18","date_gmt":"2026-09-01T07:32:18","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/email-authenticity-checker\/"},"modified":"2026-09-01T07:35:21","modified_gmt":"2026-09-01T07:35:21","slug":"inboxauth-email-authenticity","status":"publish","type":"plugin","link":"https:\/\/bn.wordpress.org\/plugins\/inboxauth-email-authenticity\/","author":17632768,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0.0","stable_tag":"1.0.0","tested":"7.1","requires":"5.8","requires_php":"7.0","requires_plugins":null,"header_name":"InboxAuth - Email Authenticity","header_author":"Go Web Smarty","header_description":"Verify your domain's email authenticity and discover who's sending as you, then generate SPF\/DKIM\/DMARC records to stop spoofing \u2014 guided by a step-by-step setup wizard.","assets_banners_color":"f2f5f9","last_updated":"2026-09-01 07:35:21","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/spoofing.wpencryption.com","header_author_uri":"https:\/\/gowebsmarty.com","rating":0,"author_block_rating":0,"active_installs":0,"downloads":56,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.0":{"tag":"1.0.0","author":"gowebsmarty","date":"2026-09-01 07:35:21","revision":3675547}},"upgrade_notice":[],"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3676590,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3676590,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3676590,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3676590,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0"],"block_files":[],"assets_screenshots":[],"screenshots":[]},"plugin_section":[],"plugin_tags":[6930,145801,235808,278610,145798],"plugin_category":[],"plugin_contributors":[178183],"plugin_business_model":[],"class_list":["post-349319","plugin","type-plugin","status-publish","hentry","plugin_tags-dkim","plugin_tags-dmarc","plugin_tags-email-security","plugin_tags-email-spoofing","plugin_tags-spf","plugin_contributors-gowebsmarty","plugin_committers-gowebsmarty"],"banners":{"banner":"https:\/\/ps.w.org\/inboxauth-email-authenticity\/assets\/banner-772x250.png?rev=3676590","banner_2x":"https:\/\/ps.w.org\/inboxauth-email-authenticity\/assets\/banner-1544x500.png?rev=3676590","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/inboxauth-email-authenticity\/assets\/icon-128x128.png?rev=3676590","icon_2x":"https:\/\/ps.w.org\/inboxauth-email-authenticity\/assets\/icon-256x256.png?rev=3676590","generated":false},"screenshots":[],"raw_content":"<!--section=description-->\n<p>InboxAuth scans your domain's SPF, DKIM, and DMARC records, then walks you through\na guided setup to close the gaps:<\/p>\n\n<ol>\n<li><strong>DNS Scan<\/strong> \u2014 checks your current SPF, DKIM, and DMARC records.<\/li>\n<li><strong>Connect Mailbox<\/strong> \u2014 validates an IMAP connection to a <code>reports@yourdomain.com<\/code>\nmailbox that will receive DMARC aggregate reports.<\/li>\n<li><strong>Set DMARC<\/strong> \u2014 walks you through publishing a starter DMARC record\n(<code>p=none<\/code>, <code>rua=mailto:reports@yourdomain.com<\/code>) so reports start flowing in.<\/li>\n<li><strong>Observer Mode<\/strong> \u2014 runs a 48-hour window, then automatically parses every DMARC\naggregate report received via IMAP to build a list of everyone sending mail as\nyour domain.<\/li>\n<li><strong>Generate Records<\/strong> \u2014 once you've confirmed which senders are legitimate, generates\na tailored SPF record plus a DMARC record with your choice of <code>quarantine<\/code> or\n   reject enforcement, and validates both live via DNS.<\/li>\n<\/ol>\n\n<p>The Dashboard gives an at-a-glance view of SPF\/DKIM\/DMARC status, an overall Email\nSecurity Score, a one-click re-scan, and a link to test whether your domain can\ncurrently be spoofed via the companion Email Authenticity Checker tool.<\/p>\n\n<h4>Requirements<\/h4>\n\n<ul>\n<li>PHP's <code>imap<\/code> extension enabled (for Step 2 \/ Step 4 mailbox access)<\/li>\n<li>PHP's <code>zip<\/code> extension enabled (Step 4 unpacks .zip-attached DMARC reports)<\/li>\n<li>Outbound DNS resolution available to the server (standard on virtually all hosts)<\/li>\n<\/ul>\n\n<!--section=installation-->\n<ol>\n<li>Upload the plugin zip file via PLUGINS &gt; ADD NEW in your wp-admin.<\/li>\n<li>Activate the plugin.<\/li>\n<li>Go to <strong>Email Authenticity Checker \u2192 Dashboard<\/strong> to begin, located on sidebar menu item within wp-admin.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"what%20if%20i%20don%27t%20have%20imap%20access%20to%20a%20reports%40%20mailbox%3F\"><h3>What if I don't have IMAP access to a reports@ mailbox?<\/h3><\/dt>\n<dd><p>Step 2 requires a real mailbox at <code>reports@yourdomain.com<\/code> since DMARC aggregate\nreports are delivered as email attachments. Most hosting control panels let you\ncreate one in a couple of clicks.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial release.<\/li>\n<\/ul>","raw_excerpt":"Verify your domain&#039;s email authenticity and discover who&#039;s sending as you, then generate SPF\/DKIM\/DMARC records to stop spoofing \u2014 step-by-s &hellip;","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/349319","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=349319"}],"author":[{"embeddable":true,"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/gowebsmarty"}],"wp:attachment":[{"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=349319"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=349319"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=349319"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=349319"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=349319"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/bn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=349319"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}