Tick the services that send email for your domain and get a valid SPF record to paste into DNS.
🔒 Generated in your browser – nothing is sent anywhere.
How to use the spf record generator
- Tick every service that sends email as your domain.
- Add any extra server IPs.
- Copy the TXT record into your DNS at the root (@).
What SPF does
SPF is a public list of the servers allowed to send email for your domain. Receiving mail servers check it, and mail from servers not on the list is treated as suspicious.
The two classic mistakes
Having two SPF records (only one is allowed – merge them) and going over 10 DNS lookups, which makes SPF fail for everyone. The generator counts lookups as you tick.
Frequently asked questions
~all or -all?
~all (soft fail) is the safe default and works well with DMARC. Use -all only when you are certain the list is complete.
Can I have two SPF records?
No. A domain must have exactly one TXT record starting with v=spf1.
Is SPF enough to stop spoofing?
No – you also need DKIM and a DMARC policy. SPF alone doesn't protect the From address people see.