Free Tool

SPF Record Generator

Build a valid SPF record for your domain and protect it against email spoofing. No technical knowledge required.

Email Providers

Select the services that send email for your domain

Your own mail servers

Authorize the servers listed in your domain DNS

Additional sources

Custom includes and IP addresses

Enforcement policy

What to do with mail from unauthorized servers

Your SPF record

Live preview — updates as you type

Record type TXT
Host / Name @
DNS lookups

Warning: SPF allows a maximum of 10 DNS lookups. Your record exceeds this limit and may fail validation.

Verify the record with the DNS Lookup tool

How to add this record?

  1. 1 Log in to your DNS provider (registrar or hosting panel).
  2. 2 Add a new TXT record with host @ (your root domain).
  3. 3 Paste the generated record as the value and save.
  4. 4 Wait for DNS propagation (up to 24-48 hours) and verify it.

SPF explained in plain language

Everything you need to know to protect your domain from email spoofing.

What is SPF?

SPF (Sender Policy Framework) is a DNS TXT record that lists which mail servers are allowed to send email from your domain. It lets receiving servers detect and block spoofed messages that pretend to be you.

Where do I put it?

Add it as a TXT record on your root domain (host @). You may only have ONE SPF record per domain — if one already exists, merge the mechanisms instead of adding a second record.

The 10-lookup limit

SPF permits a maximum of 10 DNS lookups. Every include, a and mx mechanism counts. Exceeding it makes the record fail (permerror), so keep it lean.

SPF is not enough alone

For full protection combine SPF with DKIM and DMARC. SPF checks the sending server, DKIM signs the message, and DMARC tells receivers what to do when checks fail.

Already have SPF? Add DMARC too

DMARC ties SPF and DKIM together and gives you reports on who sends mail using your domain.

Open the DMARC Generator