Does the SPF Record Generator support all major ESPs?

Last updated May 19, 2026Free tools

The Valid Email Checker SPF Record Generator is provider-agnostic. There is no hardcoded list of ESPs to choose from — instead, the tool gives you a generic Include mechanism that takes any include domain string, and every legitimate sending provider publishes one. If you can find the include string for your ESP (usually in their setup docs under "Domain Authentication" or "SPF setup"), you can put it into the generator.

Common include strings

ProviderSPF include string
Google Workspace / Gmail_spf.google.com
Microsoft 365 / Outlookspf.protection.outlook.com
Mailchimpservers.mcsv.net
SendGridsendgrid.net
Mailgunmailgun.org
Postmarkspf.mtasv.net
Amazon SESamazonses.com
Klaviyo_spf.klaviyo.com
HubSpot_spf.hubspotemail.net
Brevo (formerly Sendinblue)spf.sendinblue.com
ActiveCampaign_spf.activecampaign.com
Constant Contactspf.constantcontact.com

Where ESPs put their include string

Every ESP documents this differently. Common paths to find it:

  • Google Workspace: Admin Console → Apps → Google Workspace → Gmail → "Authenticate email".
  • Microsoft 365: Microsoft 365 admin center → Settings → Domains → your domain → DNS records tab.
  • Mailchimp: Audience → Settings → Verified domains → Authenticate.
  • SendGrid: Settings → Sender Authentication → Domain Authentication.
  • Most others: search their help center for "SPF record" or "domain authentication".

When one ESP needs more than just include

A handful of ESPs ask you to also authorize a specific IP block or a sending subdomain in addition to the include. The generator has chips for IPv4, IPv6, A Record, and MX Record precisely for these cases. If the ESP says "add this IP range too", click IPv4 and paste the range. The generator stacks the mechanisms in order in the final record.

Watch the 10-lookup ceiling

SPF has a hard limit of 10 DNS lookups per record (mostly to keep attackers from blowing up resolvers). Every include: counts as at least one lookup, and many ESP include records recursively include their own sub-records. Five major ESPs in one SPF record is usually fine; eight starts to risk overflow on some receivers. If you cross the limit, switch to an SPF flattener (which expands every include into raw IPs) or drop a provider you no longer use.

Verify it works after publishing
After you publish the record, the SPF Record Checker lists every mechanism in the resolved record. If an include is missing or misspelled, the checker shows it immediately. The DKIM checker and DMARC checker do the same for the rest of the authentication trio.