SPF record generator
Build a v=spf1 DNS TXT record in your browser. Add includes, IPv4, IPv6, and an all policy. Nothing is uploaded.
Fill the fields, then run the tool.
How to use the SPF record generator
- Add include domains (for example _spf.google.com) and any sending IPv4 or IPv6.
- Choose the all mechanism: -all, ~all, or ?all.
- Copy the TXT value into DNS for the zone apex or the mail host you publish SPF on.
SPF lookup limits
Keep includes tight. SPF may not exceed ten DNS lookups. This page does not query DNS; it only formats the string you type.
Nothing is uploaded
The record is built in the tab. Pair it with a DMARC record and DKIM keys.
SPF record generator FAQ
Where does SPF go?
A TXT record, usually on the same name that sends mail (often the zone apex).
Should I use -all?
Hard fail (-all) once you know every sender. Soft fail (~all) while you still inventory vendors.