SPF Record Generator
Generate an SPF record for your domain: tick the providers that send mail for you and get a valid SPF TXT record. Auto-counts DNS lookups so you stay under the 10-lookup limit.
Frequently asked questions
How do I generate an SPF record?
Tick every service that sends mail as your domain (your mailbox provider plus newsletter, CRM and helpdesk tools), add any of your own server IPs, pick a policy and press Generate SPF record. The generator joins the right include: mechanisms into one TXT record and counts the DNS lookups it costs.
Where do I publish the SPF record?
As a TXT record at the root of your domain (host @ or blank at most DNS providers). Only one SPF record per name: a second v=spf1 record makes both invalid, so merge new senders into the existing one instead of adding another.
Should I end the record with ~all or -all?
~all (softfail) is the safe default: mail from unlisted servers is marked suspicious, not refused. Move to -all once DMARC reports show every legitimate sender passes. Never publish +all - it authorises the whole internet to send as you.
What is the SPF 10 DNS lookup limit?
Receivers stop evaluating SPF after 10 DNS lookups and treat the record as a permanent error, which fails SPF for all your mail. Every include:, a, mx and redirect costs at least one; ip4: and ip6: cost none. The generator shows the count so you can drop or flatten includes before you hit it.
How do I check the SPF record after publishing it?
Wait for DNS to propagate (usually minutes, up to the old TTL), then run the domain through the SPF Checker. It validates the syntax, counts the lookups of every nested include and flags +all or duplicate records.