SPF record generator
List the services and IP addresses that send mail as your domain and copy one correct SPF record. Remember a domain may have only one.
SPF record generator
Builds one record. A domain may only have one, so merge it with any existing SPF record rather than adding a second.
- Type
- TXT
- Host
- @ (the domain itself)
- Value
v=spf1 ~all
Each include, mx and a counts toward the limit of 10 DNS lookups. Check the result above after you publish.
Keep your domain on your radar
A one-time check shows today. Pistos DMARC reads the reports mailbox providers send about your domain and tells you when a sender fails or a record changes.
Questions
Which includes do I need?
Each service that sends as you tells you which to use, for example _spf.google.com for Google Workspace or spf.protection.outlook.com for Microsoft 365.
~all or -all?
Use ~all (soft fail) while you find every sender. Move to -all once you are sure the list is complete. With DMARC enforced the difference matters little.
Is anything stored?
No. The record is built in your browser.
About this tool
What the generator builds
A single v=spf1 record that authorizes your services (include), your own IP ranges (ip4, ip6) and optionally your MX and A hosts, ending in ~all or -all.
The lookup limit
Receivers stop after 10 DNS lookups. Each include, mx and a counts, and so does everything inside an include. Run the SPF checker on the result to see the real count.
One record only
If your domain already has an SPF record, merge into it. Two SPF records make SPF fail with a permanent error.