SPF Record Generator

Build an SPF TXT record for your authorized email senders.

Enter the exact domain or subdomain. Do not include https:// or a path.

Separate entries with commas or spaces. Leave blank if unused.

IPv6 CIDR prefixes are supported.

Use exact include hostnames supplied by your email providers, without the include: prefix.

Records are generated here; nothing is published to your DNS automatically.

How to publish your SPF record

  1. List every service that sends email using this domain.
  2. Generate the record, preserving any legitimate senders in your existing SPF record.
  3. Open your DNS provider and update the TXT record at the indicated hostname. Many providers use @ for the zone root.
  4. Save, wait for cached DNS answers to expire, then use the SPF checker.

Can I publish two SPF records?

No. Publish one SPF record at each hostname. Combine authorized senders into that record.

Does this validate my providers?

No. This tool checks input syntax, not provider ownership or nested includes. SPF permits at most ten DNS-querying terms during evaluation, including nested includes. A domain that sends no mail can use v=spf1 -all.

Example: v=spf1 ip4:192.0.2.10 -all. Documentation addresses are examples, not your real sending IPs.

Reference: SPF specification (RFC 7208).