SPF Record Generator

Domain

Policy (all)

a — Allow the sender A record mx — Allow the domain MX servers

includes (one entry per line)

IPv4 addresses

IPv6 addresses

SPF record

DNS TXT record

Only ONE SPF record may exist per domain. ~all (softfail) is recommended to start; switch to -all (hardfail) only after successful testing.

What is an SPF record?

An SPF record (Sender Policy Framework) is a DNS TXT entry that defines which mail servers are allowed to send email on behalf of your domain. Receiving servers check it to detect spoofed senders and keep your mail out of the spam folder.

Enter your domain, the allowed servers (a, mx, include, IP addresses) and the policy – the generator builds the ready-to-use SPF record to paste into your DNS zone.

The most important SPF mechanisms

a / mx – allows the domain A and MX servers
include: – imports the SPF record of a service (e.g. Google Workspace, Microsoft 365)
ip4: / ip6: – allows individual IP addresses or ranges
~all (softfail) vs. -all (hardfail) – defines how strictly unlisted servers are treated