Skip to content
Coupons 8

You have not saved any offers or providers yet. Tap the bookmark on an offer or choose Save on a provider profile.

    Monitoring free
    Monitor your website for free
    Coupons 8 Login
    Free tool

    SPF Generator: create your SPF record

    Pick who sends email for your domain and get a ready-to-copy SPF record – with a lookup counter and warnings about the usual mistakes.

    Build your SPF record

    Tick every service that sends mail with your domain as the sender: mailbox, shop, newsletter, help desk.

    Only used to show the host and the check link. The domain is not transmitted.

    Who sends email for your domain?
    Your own servers

    The service tells you the value in its help pages, e.g. spf.your-service.com. One per line.

    What should happen to all other servers?

    Your DNS record

    Type
    TXT
    Host / name
    @
    Value
    –
      Once it's live: run the SPF check

      No guarantee for the result. Before publishing, check that every service sending mail for you is included. Changes to your DNS are at your own risk.

      The generator runs entirely in your browser. We don't transmit or store anything you enter.

      What is an SPF record?

      SPF in one sentence

      An SPF record is a TXT record in your DNS that starts with v=spf1 and lists every server allowed to send email with your domain as the sender. Receivers such as Gmail or Outlook compare the IP address of the sending server with this list. If it isn't on it, the message is more likely to end up in spam or be rejected.

      An SPF record with its include chain example.co.uk v=spf1 a mx include:_spf.mailer.io include:spf.news.net -all _spf.mailer.io include:_a.mailer.io include:_b.mailer.io spf.news.net ip4:192.0.2.0/24 -all _a.mailer.io _b.mailer.io 6 of 10 lookups a, mx, include … count 1 each
      An SPF record with its include chain

      Why you need SPF

      Without SPF, any server in the world can send mail that appears to come from your domain. Fraudsters use that for phishing in your name. Since 2024, Gmail and Yahoo also require SPF or DKIM from every sender, and both plus DMARC from bulk senders. Without SPF, even your genuine mail is delivered less reliably.

      One record for all services

      Each domain may only have one SPF record. If you use Google Workspace for your mailbox, a newsletter tool for campaigns and your host for contact-form mail, all three belong in the same record. That's exactly what the generator does: it combines every service, removes duplicates and counts the DNS lookups so you stay below the limit of 10.

      How to set up SPF

      1. List your senders

        Write down every service that sends mail with your domain: mailbox provider, web server (contact form, shop), newsletter tool, CRM, help desk.

      2. Generate the record

        Tick the services above, add your own IP addresses and includes, and choose ~all to begin with. Copy the finished value.

      3. Add it to your DNS

        In your host's DNS settings, create a TXT record for the root domain (host @ or empty). If an SPF record already exists, replace it rather than adding a second one.

      4. Check and tighten

        After a few minutes, check the record with the SPF check. Once DMARC reports show that all legitimate mail passes SPF, switch to -all.

      The building blocks of an SPF record

      An SPF record consists of the version, any number of mechanisms and a closing all. Receivers read it from left to right; the first match wins.

      Tag Meaning Example
      v=spf1 Version. Has to come first, otherwise the record isn't an SPF record. v=spf1
      ip4 Allows an IPv4 address or a whole range in CIDR notation. Costs no DNS lookup. ip4:203.0.113.0/24
      ip6 Like ip4, for IPv6 addresses and ranges. Costs no DNS lookup. ip6:2001:db8::/32
      a Allows the IP addresses from the domain's A and AAAA records, usually your web server. Costs one lookup. a
      mx Allows the servers from your MX records. Useful if your mail servers also send. Costs one lookup. mx
      include Pulls in another provider's SPF record, for example your newsletter tool's. Costs one lookup plus every lookup inside the included record. include:_spf.google.com
      all Comes last and covers every other server: -all reject, ~all mark as suspicious, ?all neutral. +all allows everyone and makes SPF useless. ~all

      Frequently asked questions

      How do I create an SPF record?

      Pick the services above that send mail for your domain, add your own servers and copy the finished value. Add it as a TXT record on your root domain. The generator counts the DNS lookups as you go and warns you about common mistakes.

      Where do I find my provider's include value?

      In the provider's help pages, usually under SPF, DNS settings or domain verification. We've included the values for the most common providers above. If a provider changes its value, the SPF check shows you whether your include still points to a valid record.

      I already have an SPF record. Do I add a second one?

      No. Two records starting with v=spf1 make SPF invalid. Look at your existing record with the SPF check, carry its services over into the generator, then replace the old record with the new one.

      Should I use ~all or -all?

      Start with ~all: mail from unlisted servers is only marked as suspicious, in case you forgot a sender. Once DMARC reports show that all legitimate mail passes SPF, switch to -all. With DMARC at quarantine or reject, the difference is small in practice.

      What if I go over 10 lookups?

      First remove services you no longer use. If a service only sends from a few fixed addresses, replace its include with ip4 entries – but only if the provider guarantees those addresses. Alternatively, send newsletters from a subdomain such as news.your-domain.com with its own SPF record.

      How long until the SPF record takes effect?

      A new record is usually visible within minutes. If you replace an old one, it can take until the old record's TTL expires, often an hour. The SPF check shows you whether the new record is already publicly visible.

      More free tools

      Check domains and websites with our free tools – quickly and without signing up.

      Availability

      Website Status Checker

      Check whether a website is online, how quickly it responds and how long its SSL certificate remains valid.

      Open tool       Infrastructure

      WHOIS & hosting check

      Identify a domain's hosting provider, IP address, nameservers and likely server location.

      Open tool       DNS & email

      DNS check

      Check every DNS record of a domain – with MX, SPF, DMARC, CNAME and nameserver checks.

      Open tool       Continuous monitoring

      Website monitoring

      Monitor websites and servers around the clock and receive immediate alerts by email, SMS or phone call when something goes down.

      Open tool       Domain

      Domain checker

      Check suitable domain names and find out which extensions are available for your project.

      Open tool       Hosting selection

      Web hosting advisor

      Answer a few questions about your website, application and requirements to find suitable plans from our hosting comparison.

      Open tool       Personal service

      Hosting tender

      Describe your project and receive non-binding, individually matched offers directly from hosting providers.

      Start tender