Build a valid SPF record in seconds. Tick the services you send through, add any custom IPs or includes, and copy the result into a single TXT record on your domain.
v=spf1 ~all
Publish this as a single TXT record on your root domain. A domain may only have one SPF record. Then confirm it with the SPF checker.
About this tool. SPF lists the servers allowed to send mail for your domain, and receivers use it to spot forgeries. This builder assembles one valid record from the services you actually send through, warns you before you cross SPF’s 10-lookup limit, and gives you a value to paste straight into DNS. Confirm it afterward with the SPF checker.
How to build and publish your SPF record
Tick every service that sends mail as your domain — your mailbox provider (Google Workspace, Microsoft 365) plus any newsletter, CRM, invoicing or helpdesk tool. Each one you miss can land legitimate mail in spam.
Add any custom sending IPs or vendor includes that are not in the common list. Use ip4: or ip6: for raw addresses and include: for a vendor's own SPF domain.
Choose your policy: ~all (softfail) is the safe place to start; -all (hardfail) is stricter and best once you are certain every sender is listed.
Publish the result as a single TXT record on your root domain. A domain may only have one SPF record — merge, never add a second.
Common problems and how to fix them
My SPF record has more than 10 lookups
SPF allows a maximum of 10 DNS lookups; go over and the record fails and mail can be rejected. Remove services you no longer use, or flatten includes into IPs. This builder warns you before you cross the limit.
I have two SPF records
Only one v=spf1 record is valid per domain — a second one makes both fail. Combine every mechanism into a single record.
Mail still lands in spam after publishing
SPF alone is not enough. Add DKIM and a DMARC policy too, and confirm the record with the SPF checker once DNS has propagated.
Common questions.What is an SPF record?
SPF (Sender Policy Framework) is a DNS TXT record listing the servers allowed to send email for your domain. Receiving servers check it to decide whether a message claiming to be from you is genuine.
Is this SPF generator free?
Yes, completely free with no signup. It runs in your browser and gives you a record you can paste straight into DNS.
Where do I publish the SPF record?
As a TXT record on your root domain (for example example.com), with the host set to @ or the domain name. Your DNS or hosting provider has a place to add TXT records.
Should I use ~all or -all?
Start with ~all (softfail) while you confirm every sender is included, then move to -all (hardfail) for the strongest protection against spoofing.
How do I check my SPF record is working?
After DNS propagates, run it through the free SPF checker, which validates the syntax, counts lookups and flags problems.