Free SPF record generator
SPF lists who may send email from your domain. Type your domain: we read your current record and mail servers and tick what you already use. Add the rest, then copy one record.
What you get
- One SPF record covering every service you tick, with the include each service documents.
- A live count of the DNS lookups the record needs, including those inside each include, against the limit of 10.
- Your current record and mail provider, read from public DNS and pre-ticked.
- Plain notes on -all versus ~all and why a domain must have only one SPF record.
- Where to add it, worked out from your nameservers.
Common questions
What is the 10-lookup limit?
Receivers stop after 10 DNS lookups while checking SPF and then treat the record as broken. Every include, a and mx costs one, plus the lookups inside each include, which some services nest several deep (Zoho's and Freshdesk's do). We count them all for you.
Should I use -all or ~all?
-all says mail from anywhere else is not from you. Use ~all for a week or two while you confirm nothing legitimate is missing, then switch to -all.
My accounting software sends invoices. Do I add it?
Only if it sends from your own address through its own servers. Many send from their domain or through your Microsoft 365 or Google account, which is already covered. Their help page says which include to add, if any.
Get told when it changes
Add the site to a free account and we check it every five minutes, with certificate, domain and email security alerts in plain English.