SPF Record Generator

About this tool

SPF (Sender Policy Framework) is a DNS record that lists which servers may send email for your domain, so receivers can spot forged mail. Tick the services you use, add your own IPv4 or IPv6 addresses and any other include domains from a provider's setup guide, then choose how to treat everyone else: soft fail (~all) while you test, fail (-all) once every sender is listed. The tool writes the record in the right order, removes duplicates, validates addresses and warns about the limits that break SPF in practice: only 10 DNS lookups are allowed in total, and each include can use several more inside it, so the tool shows how many lookups your record uses directly and points you to the SPF checker for the real total. It also splits long records into the 255-character strings DNS requires. A domain may have only one SPF record, so replace the old one rather than adding a second. Generated records were tested with an independent SPF engine against real provider records. Nothing you type is sent anywhere.

How to use it

1. Tick every service that sends email using your domain, and add any IP addresses you send from.
2. Choose soft fail (~all) to start, or fail (-all) when every sender is listed.
3. Copy the value into a TXT record at your domain (host @), replacing any existing SPF record.
4. Check the result with the SPF checker, which counts the real DNS lookups.

Common problems

My email goes to spam after I published SPF

A sender is probably missing from the record. Look at the full headers of a failing message to see which server sent it, add it, and keep ~all until the failures stop.

The checker says I have more than 10 lookups

Each include, a, mx and redirect counts, plus lookups inside included records. Remove services you no longer use or replace includes with IP ranges.

Can I publish two SPF records?

No. Two records cause a permanent error and SPF fails. Combine everything into one record.