Free SPF Record Generator
Build a valid SPF DNS record for your domain. Authorize senders, configure IP addresses, and set your failure policy — instantly, with no signup required.
Generated entirely in your browser. No data is sent to our servers or stored anywhere.
Already have SPF set up?
Verify your existing record is valid and properly published.
What is SPF and Why It Matters
SPF (Sender Policy Framework) is a DNS record that specifies which mail servers are authorized to send email on behalf of your domain — preventing spoofing and improving deliverability.
Required for DMARC Compliance
SPF is one of two authentication methods (alongside DKIM) that power DMARC enforcement. Without it, receiving servers have no way to verify which IPs are allowed to send on your behalf. Major providers like Gmail and Yahoo now require SPF for reliable inbox delivery.
Prevents Email Spoofing
SPF tells receiving servers exactly which IP addresses are authorized to send email on your behalf, blocking impostors.
Improves Deliverability
Emails from domains with valid SPF records are far less likely to be flagged as spam or rejected outright.
How to Publish Your SPF Record
Four steps from generation to verified SPF authentication.
Generate Your SPF Record
Use the tool above to build your record. Add each mail provider you use via the mechanism buttons — common ones include include:_spf.google.com for Google Workspace or include:spf.protection.outlook.com for Microsoft 365.
Tip: Check with every email service you use — ESPs, CRMs, marketing tools — and add all of them before finalizing.
Log In to Your DNS Provider
Access your domain control panel on Cloudflare, GoDaddy, Namecheap, Route53, or wherever your domain DNS is managed. Navigate to the DNS records section.
Create a New TXT Record
Set the record name to your domain (or @), type to TXT, and paste the generated SPF value as the record content.
Important: You can only have one SPF record per domain. If one already exists, edit it instead of creating a duplicate.
Verify With Our SPF Checker
DNS changes can take up to 48 hours to propagate. Use our SPF Record Checker to confirm the record is live and correctly formatted.
How SPF Works Behind the Scenes
Sending
Email Sent
Your mail server sends an email claiming to be from your domain, including the sending IP address.
Verification
DNS Lookup
The receiving server fetches your SPF TXT record and checks if the sending IP is listed as authorized.
Result
Pass or Fail
If the IP matches, SPF passes and the email proceeds. If not, your failure policy determines what happens.
More Free DNS Tools
Frequently Asked Questions
Common questions about SPF records, failure policies, and email authentication.
SPF (Sender Policy Framework) is a DNS TXT record that specifies which mail servers are authorized to send email on behalf of your domain. It helps prevent spoofing and improves deliverability.
We recommend '-all' (Fail) for most domains. This tells receiving servers to reject emails from unauthorized sources. Use '~all' (SoftFail) during initial setup to monitor without blocking.
No. A domain should have only one SPF record. Multiple SPF records can cause validation failures. If you need to authorize multiple sources, combine them into a single record using include statements.
The include mechanism delegates SPF validation to another domain's SPF record. For example, 'include:_spf.google.com' authorizes Google's mail servers to send on your behalf.
After publishing the DNS record, it typically takes 15 minutes to 48 hours for DNS propagation. Most changes are visible within 1 hour.
Yes, completely free with no signup required. Your data is not stored — everything runs in your browser.
Still have questions?
Contact our support team →Your Next Campaign Deserves
a Clean List
Stop guessing. Stop bouncing. Start reaching the people who actually want to hear from you.
200 free credits · No credit card required · Results in minutes