Free SPF generator

SPF record generator

Tick everything that sends email as you. This SPF record generator writes the record and counts every DNS lookup before you publish, so nothing breaks on day one.

Your domain

Just the domain, like yourcompany.com. No www or https:// needed.

Your inbox provider

Newsletters and sending services

Helpdesk and CRM

Your own servers

Fixed IP addresses (optional)

Everyone else

Pick the services that send email for you. A record with nothing in it tells inboxes nobody may send as you.

DNS lookups

0 of 10

Each service costs at least one lookup, and some use more behind the scenes. Count them for real before you publish.

Your record

Add this record to your DNS

It updates as you change the options above.

TypeNameValueTTL

TypeTXT

Name@

Valuev=spf1 ~all

TTLAuto

It works the same at every DNS provider, such as Cloudflare, GoDaddy, Namecheap, Squarespace or 123 Reg. Only the words change: Name may be called Host, Value may be called Content, Text or TXT value, and TTL may say Automatic or 1 hour.

Sign in where your domain's DNS is managed. That's usually the company you bought the domain from, such as GoDaddy or Namecheap, or Cloudflare if you've moved your DNS there.
Open the DNS settings for yourcompany.com. The page may be called DNS, DNS records, Manage DNS or Advanced DNS. Look for a TXT record whose value starts with v=spf1. If there is one, edit it instead: replace its value with yours, save, and you're done. Two SPF records break both, so never add a second.
No SPF record yet? Choose Add record, and set Type to TXT.
Type @ into Name. It stands for the domain itself. Some providers want this box left empty instead, or want yourcompany.com.
Paste the value into Value, leave TTL as it is, and save.

Most providers show the change within an hour, though it can take up to a day. Then run the SPF checker on yourcompany.com to check it's live.

What goes in an SPF record

An SPF record is one line of text. It starts with v=spf1, lists who may send for you, and ends with a rule for everyone else.

Part	Needed?	What it does
`v=spf1`	Required	Marks the record as SPF. Always first.
`include:`	Usually	Adds a service that sends for you, such as Google Workspace or Mailchimp. Costs at least one lookup.
`a`, `mx`	Sometimes	Allows your website’s server or your inbox servers. Only add them if those servers really send email.
`ip4:`, `ip6:`	Sometimes	Allows a fixed address or range. Costs no lookups.
`~all`, `-all`	Required	Tells inboxes what to do with everyone else. Always last.

Add it in three steps

List every sender

Think beyond your inbox: newsletters, your helpdesk, CRM, invoicing and booking tools often send as you too.

Publish one TXT record

Add it at the root of your domain (Name: @). If an SPF record already exists, replace it rather than adding a second.

Check it worked

Run the SPF checker after a few minutes, then set up DKIM and DMARC.

SPF record generator questions

Wherever your domain’s DNS is managed, usually your domain registrar or Cloudflare. Add a TXT record with the name @ (or leave the name blank) and paste the record.

Edit the existing one or replace it with the new record. A domain can only have one SPF record; two break SPF for all your mail.

Some services hide extra includes inside their own record. Mailgun, for example, uses five. Count all lookups shows the real total before you publish.

Yes. Every domain you send from needs its own SPF, DKIM and DMARC, or Gmail and Outlook treat its mail as suspect from the first email.

Step-by-step fix guides: SPF record syntax, with examples · SPF record for Google Workspace · How to add a TXT record in GoDaddy · Multiple SPF records