Create SPF record easily with our free generator tool
Generate custom SPF records for your domain to prevent email spoofing and improve deliverability. Simply configure your email sources and get a ready-to-use SPF record.
Third-party domains that send email for you (e.g., Google Workspace, MailChimp, SendGrid)
Specific IPv4 addresses or CIDR ranges authorized to send email for your domain
Specific IPv6 addresses or ranges authorized to send email for your domain
Allow your domain's A record IP addresses to send email
Allow your domain's MX record IP addresses to send email
Redirect SPF processing to another domain (alternative to includes - use one or the other)
How to handle emails from sources not explicitly authorized in your SPF record
SPF validates that emails are sent from authorized IP addresses and domains for your domain
Protects your domain from being used in phishing attacks and unauthorized email campaigns
Properly configured SPF records help your legitimate emails reach the inbox instead of spam
Add all services and IP addresses that send email for your domain, including third-party providers like Google Workspace, MailChimp, or SendGrid.
Choose how strictly to handle unauthorized emails. Start with soft fail (~all) for testing, then move to hard fail (-all) for maximum security.
Our tool creates an optimized SPF record with proper syntax, DNS lookup optimization, and best practices built-in.
Copy the generated SPF record and add it as a TXT record in your domain's DNS settings. Changes typically take 15-30 minutes to propagate.
Automatically optimizes your SPF record to stay within the 10 DNS lookup limit
Ensures proper SPF syntax and prevents common configuration errors
Follows industry standards and security recommendations for SPF implementation
Simple interface that doesn't require technical expertise to create proper SPF records
Generate your SPF record immediately without waiting or complex setup processes
No cost, no registration required - just generate your SPF record and go
Support for includes, IP addresses, A/MX records, and redirect mechanisms
Generated records are ready to paste directly into your DNS provider
For domains using only Google Workspace for email
Example SPF Record:
v=spf1 include:_spf.google.com ~all
Setup Steps:
For domains using only Microsoft Office 365 for email
Example SPF Record:
v=spf1 include:spf.protection.outlook.com ~all
Setup Steps:
For domains with web server email and marketing tools
Example SPF Record:
v=spf1 ip4:192.168.1.1 include:servers.mcsv.net ~all
Setup Steps:
For domains using multiple email providers and services
Example SPF Record:
v=spf1 include:_spf.google.com include:sendgrid.net ip4:203.0.113.1 ~all
Setup Steps:
include:
Includes another domain's SPF record in your policy
When to use:
For third-party email services like Google Workspace, MailChimp, SendGrid
Example:
include:_spf.google.com
ip4:
Authorizes specific IPv4 addresses or CIDR ranges
When to use:
For your own mail servers with known IP addresses
Example:
ip4:192.168.1.1 or ip4:192.168.1.0/24
ip6:
Authorizes specific IPv6 addresses or ranges
When to use:
For IPv6-enabled mail servers
Example:
ip6:2001:db8::1
a
Authorizes the domain's A record IP addresses
When to use:
When your mail server shares the same IP as your website
Example:
a or a:mail.example.com
mx
Authorizes the domain's MX record IP addresses
When to use:
When your MX records point to your authorized mail servers
Example:
mx or mx:example.com
redirect=
Redirects SPF processing to another domain
When to use:
Alternative to includes when you want to use another domain's complete SPF policy
Example:
redirect=_spf.example.com
SPF has a 10 DNS lookup limit that can be exceeded with many includes
Solution:
Replace include mechanisms with specific IP addresses where possible, or use redirect instead of multiple includes
Using both redirect and include/all mechanisms in the same record
Solution:
Use either redirect OR include mechanisms with an all qualifier, not both
Forgetting to include all services that send email for your domain
Solution:
Audit all email sources including contact forms, CRM systems, marketing platforms, and transactional email services
Using +all which provides no protection against spoofing
Solution:
Start with ~all for testing, then move to -all for production after verifying all legitimate sources work
Use our generator to create a customized SPF record based on your email infrastructure
Log into your domain registrar or DNS provider's control panel
Add your SPF record as a TXT record in your DNS
Allow time for your DNS changes to propagate globally
Verify your SPF record is working correctly
Keep your SPF record updated as your email infrastructure changes
Get started with our email validation API and experience the power of AI-powered email validation.