SPF Record Generator
Create valid SPF records for your domain with our easy-to-use generator. Authorize email servers, set policies, and improve email deliverability.
Quick Add Email Providers
SPF Mechanisms
Final Policy
Use redirect instead of all policy to delegate to another SPF record
Generated SPF Record
📋 DNS Setup Instructions
Record Type: TXT
Name/Host: @ (or your domain)
Value: The generated SPF record above
TTL: 3600 (1 hour) or your provider default
Priority: N/A (not used for TXT records)
Important Notes:
- • Only one SPF record per domain is allowed
- • Test with ~all before using -all policy
- • Changes may take up to 48 hours to propagate
- • Verify the record with our SPF Record Checker
💡 SPF Generator Tips
• Start simple: Begin with your main email provider and add others as needed
• Use includes: Prefer include mechanisms over IP addresses for better maintainability
• Test thoroughly: Use ~all policy initially to monitor without blocking emails
• Monitor lookups: Keep DNS lookups under 10 to avoid SPF failures
• Regular review: Update SPF records when changing email providers or servers
• CIDR notation: Use IP ranges (192.168.1.0/24) to reduce record length
SPF Record Basics
SPF (Sender Policy Framework) records help prevent email spoofing by defining which servers are authorized to send email for your domain.
When an email is received, the recipient's mail server checks the SPF record to verify that the sending server is authorized to send mail for that domain.
SPF Benefits:
- • Prevents email spoofing
- • Improves email deliverability
- • Protects domain reputation
- • Required for DMARC compliance
- • Reduces spam and phishing
SPF Mechanisms
a
Authorizes the A record of the domain. If the domain's A record matches the sending IP, the email passes SPF.
mx
Authorizes the mail exchange (MX) servers for the domain. Common for domains that send email from their own mail servers.
ip4/ip6
Explicitly authorizes specific IPv4 or IPv6 addresses or CIDR ranges. Most direct way to authorize sending servers.
include
Includes another domain's SPF record. Useful for third-party email services like Google Workspace or MailChimp.
Frequently Asked Questions
What is the SPF lookup limit?
SPF records are limited to 10 DNS lookups during evaluation. This includes 'include', 'a', 'mx', and 'redirect' mechanisms. Exceeding this limit causes SPF to fail.
Should I use -all or ~all?
Start with ~all (softfail) for testing, then move to -all (hardfail) once you're confident. -all provides better protection but can block legitimate emails if misconfigured.
How long is an SPF record valid?
SPF records don't expire, but DNS TTL determines how long they're cached. Review and update your SPF record when changing email providers or servers.
Can SPF records be too long?
Yes, SPF records must be under 255 characters for a single TXT record. Use includes and CIDR notation to keep records concise while authorizing all needed servers.