Free email-authentication toolkit
List the services and IPs allowed to send mail for your domain. We assemble a valid v=spf1 record and warn you if you approach the 10-lookup limit. No signup, no backend: everything runs right here in your browser.
List the services and IPs allowed to send mail for your domain. We assemble a valid v=spf1 record and warn you about the 10-lookup limit.
The basics, briefly
SPF (Sender Policy Framework) is a DNS TXT record published at your domain root. It lists every server and service authorised to send email on your behalf — by IP range or by referencing another domain's SPF record with include:. When a receiving mail server gets a message from your domain, it checks your SPF record to decide whether to accept it. Use the generator above to build yours in seconds — then verify it with our SPF checker.
RFC 7208 mandates that evaluating an SPF record must not require more than 10 DNS lookups (counting include:, a, mx, ptr and exists mechanisms). If the limit is exceeded, receivers return a permerror result, which can cause legitimate mail to fail DMARC alignment. The lookup meter above tracks your count in real time — keep it under 10. Read more in our SPF knowledge base article.
Copy the generated record above, then log in to your DNS provider (Cloudflare, Route 53, GoDaddy, etc.). Create a TXT record at your domain root (leave the hostname blank, or enter @ depending on your provider) and paste the record as the value. Never publish two SPF records for the same domain — combine everything into one. Confirm the result with our SPF checker.