What is an SPF record?

An SPF (Sender Policy Framework) record is a DNS TXT record that lists the mail servers authorized to send email for your domain. Receiving mail servers check this record to decide whether an incoming email is legitimate or potentially spoofed.

Why does the 10 DNS lookup limit matter?

RFC 7208 limits SPF records to 10 DNS lookups (mechanisms that trigger a DNS query: include, a, mx, ptr, exists). Exceeding 10 causes a permanent error (permerror), meaning your SPF check fails regardless of the actual senders.

What does ~all vs -all mean?

~all (softfail) marks unauthorized senders as suspicious but usually still delivers the mail. -all (fail/reject) tells receiving servers to reject mail from unlisted senders outright. Start with ~all, then tighten to -all once your record is verified correct.

Can I have more than one SPF record?

No. RFC 7208 requires exactly one SPF TXT record per domain. Multiple SPF records cause a permerror. Combine all your senders into a single record using this generator.

Do IP addresses count toward the 10 lookup limit?

No. ip4: and ip6: mechanisms are resolved locally without a DNS lookup, so they do not count toward the 10-lookup limit. Only mechanisms like include:, a:, mx:, and ptr: consume lookups.

Where do I add the SPF record in DNS?

Add it as a TXT record for your domain (e.g. example.com, not mail.example.com) with the exact string this tool generates. Most DNS providers have a TXT record type in their management console.

SPF Record Generator - Build SPF DNS TXT Records

Summary

Select your authorized mail senders and instantly build a valid SPF TXT record to add to your DNS.

How it works

Enter your domain name (e.g. example.com) in the domain field.
Select the mail providers authorized to send on your behalf (Google Workspace, Microsoft 365, etc.).
Add any custom IP addresses, CIDR ranges, or hostnames in the custom senders section.
Choose the policy qualifier: ~all (softfail), -all (fail), or ?all (neutral).
The SPF record string updates in real time — copy it and add it as a TXT record in your DNS.

Use cases

Generate an SPF record for a new domain before launching email campaigns.
Add a third-party email service (SendGrid, Mailchimp) to an existing SPF record.
Verify that your SPF record stays under the 10 DNS lookup limit.
Quickly combine multiple mail senders into a single, properly formatted record.
Troubleshoot email deliverability issues caused by missing or malformed SPF records.
Set up SPF authentication for transactional email providers.

SPF Record Generator

Your Domain

Mail Service Providers

Custom Senders

Policy for Unlisted Senders

DNS Lookup Usage

Generated SPF Record

Active Mechanisms

How to Add to DNS