No Login Data Private Local Save

SPF Record Generator - Online Email Authentication DNS

Network Security authentication DNS email SPF
62
0
0
0

SPF Record Generator

Easily create a valid SPF TXT record for your domain to prevent email spoofing and improve deliverability.

Build Your SPF Record
Used for a and mx mechanisms. Leave empty for generic placeholders.
Google Workspace Microsoft 365 Outlook.com SendGrid Mailchimp Zendesk Amazon SES Shopify ProtonMail Mailgun
Click a service to add its include: mechanism to your list.
We recommend -all for strict protection once you’ve verified all legitimate senders.
Generated SPF Record
v=spf1 -all
Length: 10 chars too long
Copied!
Add this TXT record to your domain's DNS (host: @ or your domain name). Propagation may take up to 48 hours.

Frequently Asked Questions

An SPF (Sender Policy Framework) record is a DNS TXT record that lists all mail servers authorized to send emails on behalf of your domain. It helps prevent email spoofing and improves deliverability.

Without SPF, spammers can forge your domain in the "From" address, damaging your reputation. SPF helps receiving servers verify that the email actually came from you, reducing the chance of your legitimate emails ending up in spam.

-all(Fail): reject all unauthorized servers; ~all(SoftFail): mark as suspicious but accept; ?all(Neutral): make no assertion; +all(Allow): allow all (not recommended). Start with ~all during testing, then move to -all for strict protection.

The record should ideally stay under 255 characters, but up to 450 characters is acceptable. If it exceeds 450, you may experience DNS lookup limitations. Use include: mechanisms to keep it short and consider splitting if necessary (though one domain must have one SPF record).

No. A domain should have exactly one SPF record. Multiple TXT records with "v=spf1" will cause SPF checks to fail. If you need to combine several sources, merge them into a single record using include: mechanisms.

Log into your DNS provider (e.g., Cloudflare, GoDaddy), create a new TXT record, set the host to @ (or your root domain), and paste the generated value. Save and wait for propagation (up to 48 hours).

SPF authenticates the sending server's IP, DKIM verifies the email's integrity with cryptographic signatures, and DMARC ties them together with a policy. For best protection, deploy all three.

Use online tools like MXToolbox SPF Checker, or run nslookup -type=TXT yourdomain.com in your terminal. Also send a test email to a service like mail-tester.com to see if SPF passes.

Yes, you can use the ip6: mechanism to specify IPv6 addresses or CIDR ranges, e.g., ip6:2001:db8::/32. Our generator supports IPv6 custom mechanisms.

Update it whenever you add or remove email sending services, change your mail infrastructure, or notice delivery issues. Regularly review it to keep it lean and avoid exceeding lookup limits.
🔧 Related Tools