Open Terminal

SPF Record Generator

Available

Build an SPF record from your mail providers and IP ranges, with validation for syntax, the 10-lookup limit and record length.

Review before publishing. A wrong SPF record can make legitimate mail fail. Check every service that sends email for your domain, then verify the published record with SPF Lookup.

Build your SPF record

Only used to show where to publish the record.

Mail services that send for you

Provider values are common defaults — confirm the exact include with each provider’s documentation.

Your own servers

One domain per line, without “include:”.

Mail from other servers should…

Your SPF record

Type TXT · Host @ 
 
  
 
  
  
  
  
 
How it works
 
 
Runs in your browser. Selected providers become include: mechanisms, IP ranges become ip4:/ip6: mechanisms, and the record ends with the “all” policy you choose. The tool counts DNS lookups and warns about common mistakes.
  
 
 
 
Safeguards & responsible use
 
     
  • Processed entirely in your browser — nothing you paste is uploaded or stored.
  • Generated records are suggestions: review them, and test with a lookup tool, before publishing.
    •  
 
 
 
Frequently asked questions
 
 
 Should I use -all or ~all? 
-all (fail) is strictest. Many domains start with ~all (softfail) while confirming every legitimate sender is listed, then move to -all with DMARC enforcement.
 
 Why is +all not offered? 
+all authorizes every server on the internet to send as your domain, which defeats SPF entirely.