Skip to content

Free tool · no sign-up

SPF record generator

Short answerThe SPF generator builds a single SPF TXT record for every service that sends email for your domain: pick your email provider and sending tools, add any server IPs, choose ~all or -all, and copy the record.

Who sends email for your domain?
Comma-separated, from your tools' setup instructions.
Also allow

TXT value for your domain (host @)

    Replace any existing SPF record; never publish two. Then verify with the SPF checker.

    Lookups run in your browser through public DNS-over-HTTPS resolvers (Cloudflare, then Google). We don't store what you check. Privacy

    How to use it

    Reading the result

    1. 1

      List your senders

      Pick your mailbox provider and every tool that sends as your domain: marketing, transactional and support tools.

    2. 2

      Add fixed IPs

      Add ip4: ranges for your own servers instead of extra includes, to save DNS lookups.

    3. 3

      Choose the ending

      ~all is the safe default; -all is stricter once you're sure the list is complete.

    4. 4

      Replace, don't add

      Edit your existing SPF record rather than publishing a second one, then verify with the SPF checker.

    SPF record
    An SPF record is one TXT record on your domain starting with v=spf1, for example v=spf1 include:spf.protection.outlook.com ~all. It lists the services and IPs allowed to send as your domain. More about SPF record

    FAQ

    SPF generator questions

    What if I already have an SPF record?

    Replace it with the generated one, or add the new includes to it. A domain must never have two SPF records.

    Do I need SPF if I have DKIM?

    Yes. Large mailbox providers require both from bulk senders, and DMARC passes when either aligns, so having both makes delivery more robust.

    Why does the generator warn about lookups?

    Each include costs at least one DNS lookup and often several more inside it. Past 10 total, SPF fails. Check the published record with the SPF checker to see the real count.

    Go deeper: Cold email infrastructure playbook. Fix it for good with email warm-up.