Issuer discovery generator
Fill the fields below. Copy DNS, download JSON, grab Pages headers — nothing is uploaded.
Creates _email-verification.<email-domain> TXT. Not necessarily the same host as the issuer origin.
Must be lowercase bare hostname — no https://, port, path, or uppercase. Chrome rejects non-hostname iss values.
Include both Ed25519 and EdDSA so Chrome 154–155 and 156+ accept your metadata.
DNS TXT
/.well-known/email-verification
Cloudflare Pages _headers recipe
Serve the extensionless well-known file as application/json on the issuer origin.
Why this tool exists
Chrome Email Verification issuers must publish a DNS TXT delegate (_email-verification.<email-domain> → iss=<bare-host>) and host /.well-known/email-verification as JSON. Easy mistakes: hostname vs issuer origin mismatch, or missing dual alg identifiers after Chrome 156. This page builds the three artifacts locally. Need steps? See the how-to or use cases.