SPF Record Generator

Generated entirely in your browserYour SPF record is built locally from your inputs — nothing is sent to our servers.

Never transmittedThe record is generated on your device and never leaves your browser.

Nothing storedWe don't log or save any input you use to build this record.

No third-party sharingYour domain details are never shared with ads, trackers, or outside services.

Works offlineSince nothing is sent to a server, this tool keeps working even without an internet connection.

About SPF Record Generator

What Is an SPF Generator?

SPF (Sender Policy Framework) is a DNS record that lists which mail servers are authorized to send email on behalf of your domain, helping receiving servers reject spoofed messages that pretend to come from you.

How Our SPF Generator Works

Enter the mail services and IP addresses authorized to send on your behalf, and the tool assembles a correctly formatted SPF TXT record ready to publish in your DNS.

How to Use the SPF Generator

List the mail providers/IPs authorized to send for your domain
Click Generate
Publish the resulting TXT record in your DNS (only one SPF record per domain is allowed)

Key Features

Correct SPF syntax — avoids common formatting mistakes
Supports multiple senders — combine several authorized services into one record

Who Uses This Tool

Email administrators setting up or updating domain email authentication. Businesses using multiple email services (e.g. Google Workspace plus a marketing platform) that all need to be authorized.

Frequently Asked Questions

Can I have more than one SPF record?
No — only one SPF TXT record is allowed per domain; combine all authorized senders into that single record instead.

Is this tool free?
Yes, generating an SPF record is completely free.

Frequently Asked Questions

What is an SPF record?

SPF (Sender Policy Framework) is a DNS TXT record that lists which mail servers are authorized to send email for your domain. Receiving mail servers check this record to decide whether an incoming message claiming to be from your domain is legitimate.

Can I have more than one SPF record?

No. A domain must have exactly one SPF TXT record. Having two is explicitly invalid per the SPF specification and can cause all your mail to fail SPF checks. If you already have one, merge new mechanisms into it instead.

Should I use ~all or -all?

Start with ~all (SoftFail) while you confirm every legitimate sender is included. Once you're confident your record is complete and accurate, switch to -all (Fail) for stronger protection against spoofing.

What is the 10 DNS lookup limit?

The SPF spec limits evaluation to 10 DNS lookups (each include:, a:, mx:, ptr:, exists: mechanism counts). Exceeding this causes a "permerror" and the entire SPF check fails, even for legitimate mail. Keep your include list lean.

Does SPF alone stop email spoofing?

Not completely. SPF only protects the envelope sender address and breaks under simple forwarding. Pair it with DKIM (message signing) and DMARC (policy enforcement) for comprehensive protection.

How long does it take to go live after adding the record?

DNS propagation is usually a few minutes to a few hours depending on your DNS provider and the record's TTL, though it can occasionally take up to 48 hours globally.