SPF Record Generator

Builds a valid SPF TXT record for a domain by walking through which mail sources are authorized to send on its behalf — your own mail server, a provider like Google Workspace or Microsoft 365, a transactional email service — and assembling the correct syntax automatically. SPF records are easy to get syntactically wrong by hand, particularly around the include mechanism and the difference between ~all (soft fail) and -all (hard fail). Worth knowing about the 10 DNS-lookup limit SPF imposes — exceeding it causes a permanent SPF failure for the whole domain.

SPF only validates the envelope sender (the technical return-path address), not the visible From address a recipient actually sees — that's specifically what DMARC alignment checks, which is why a domain can pass SPF and still get spoofed in the visible From field without DMARC in place.

📖 Read more in our Knowledge Base →