About this tool
A free SPF record generator for domain owners and IT admins. Tick the email services that send on behalf of your domain — Google Workspace, Microsoft 365, Brevo, Amazon SES, Mailgun and more — add any custom includes or IPs, choose your policy (softfail or hardfail) and copy the resulting SPF TXT string straight into your DNS.
Frequently asked questions
- Where do I put the SPF record?
- Add it as a TXT record on your root domain (host '@' or blank) in your DNS provider. Only one SPF (v=spf1) TXT record is allowed per domain — merge multiple senders into one record.
- What's the difference between ~all and -all?
- ~all is softfail: receivers accept the mail but mark it as suspicious. -all is hardfail: receivers should reject unauthorised senders. Start with ~all, move to -all once you're sure every legitimate sender is listed.
- Is my data sent anywhere?
- No. The record is built entirely in your browser.
- Do I still need DKIM and DMARC?
- Yes. SPF alone is not enough — pair it with DKIM and DMARC for reliable deliverability and to prevent spoofing.