Free email authentication tool

Free SPF Record Generator

An SPF record generator creates the single DNS TXT value that lists services and servers allowed to send email for your domain. Build a record locally, check its estimated DNS lookups, and copy it without signing up.

Authorized senders

Build your SPF record

Email providers
Domain mechanisms

DNS TXT value

Your SPF record

v=spf1 include:_spf.google.com ~all
Estimated DNS lookups1/10
Mechanisms1

Publish exactly one SPF record at the root domain unless your provider says otherwise. SPF cannot contain two separate v=spf1 TXT records. Verify with your DNS host and test legitimate senders before using -all.

How to create an SPF record

Step 1

Select email providers

Choose every platform that legitimately sends mail for the domain.

Step 2

Add custom senders

Enter provider include domains and static IPv4 or IPv6 ranges supplied by your mail services.

Step 3

Choose a policy

Use soft fail while testing, then consider hard fail after all legitimate senders pass.

Step 4

Publish and verify

Add the generated value as one DNS TXT record and test DNS propagation plus real mail authentication results.

SPF record questions

What is an SPF record generator?

An SPF record generator combines the mail services and servers you authorize into one v=spf1 DNS TXT value, ending with a policy for other senders.

Can a domain have two SPF records?

No. A domain should publish one SPF record. Multiple v=spf1 records cause a permanent SPF error; merge all authorized mechanisms into one record.

What is the SPF 10-lookup limit?

SPF evaluation permits at most 10 DNS-triggering lookups. Include, a, mx, redirect, and exists can consume lookups, including nested provider records.

Should I use ~all or -all?

Start with soft fail (~all) while confirming every legitimate sender. Move to hard fail (-all) only after testing, because missing senders may be rejected.

Does SPF protect the visible From address?

SPF checks the envelope sender or HELO identity, not necessarily the visible From address. Use DKIM and DMARC with SPF for stronger domain authentication.