SPF Record Generator

What this generator builds

An SPF record is a single TXT record that lists every server allowed to send email as your domain. Receivers check the connecting IP against that list on every message. The syntax is unforgiving — one duplicate record or one lookup over the limit and receivers ignore your SPF entirely — so the generator enforces the rules that matter as you build.

One record, every sender

The most common SPF mistake is publishing a second record when adding a new tool. The right move is always to merge: one v=spf1 record containing every sender. Select all your platforms above and the generator merges them for you, deduplicated.

Live lookup counting

Each include costs at least one DNS lookup against the hard cap of 10 — and the includes nested inside your providers' own records count too. The counter under the form shows your top-level total so you can see headroom before you publish. If you're near the ceiling, prune tools you no longer use, or split marketing mail onto a subdomain with its own SPF record.

Sensible fail policy defaults

We default to ~all because a softfail rollout never costs you legitimate mail while you confirm the sender list is complete. Once your DMARC reports show every real source passing, switch to -all and republish.

After you publish

DNS changes typically propagate within an hour. Verify the live record with our SPF record checker, then finish the authentication stack: generate your DKIM record and DMARC policy, and run the combined deliverability test for a single score across all three.

If you're setting this up across a fleet of cold-email sending domains, that's literally our job — see how we build cold email infrastructure, or read the full SPF, DKIM & DMARC guide for cold email.