SPF record generator
Tell receiving servers who is allowed to send mail for your domain. Pick the sources, copy the TXT record into DNS.
Runs entirely in your browser — nothing you enter is sent to our servers.
DNS lookups: 2 of 10
Publish only one SPF record per domain. Merge with the existing one if there is one.
How it works
SPF lists the servers allowed to send mail for your domain. a and mx authorize your own servers, ip4/ip6 add fixed addresses (say, your VPS), include: pulls in a provider's list. Receivers stop after 10 DNS lookups and return permerror, so the tool counts them for you. Start with ~all while testing and move to -all once DMARC reports look clean. One domain, one SPF record — two TXT records starting with v=spf1 break both.
FAQ
~all or -all?
~all (softfail) marks unlisted senders as suspicious; -all rejects them. Begin with ~all, check DMARC reports for a week or two, then tighten to -all.
I send from a VPS — what do I add?
Add the server's public IPv4 (and IPv6 if it has one) as ip4:/ip6:. Also set a PTR record for that IP — many receivers check it.
Related tools
All tools →Put it to use on your own server: KVM VPS from $3/month, root access, crypto payments.
VPS plans