SPF Record Generator
Create a valid SPF record in seconds. Build DNS TXT values with includes, IPs, and policy modes to improve email deliverability and sender trust.
Optional. Used to generate the full DNS TXT line.
One domain per line or comma separated.
DNS lookups
3
Sender sources
3
Included domains
1
No structural SPF issues detected from the current inputs.
What this SPF record generator does
This SPF record generator helps you create a standards-friendly SPF TXT value from structured form fields. Instead of manually writing mechanisms, you can select providers, add IP ranges, and choose your policy, then copy a ready-to-publish record.
SPF gets your mail delivered. It doesn't get it dealt with.
NeatMail handles the other side of the inbox: labeling what lands, archiving what doesn't matter, and catching every promise inside the mail that does — in Gmail and Outlook.
About the SPF Record Generator
An SPF record generator is a tool that builds the DNS TXT record which lists the mail servers authorized to send email for your domain. You add the IP addresses and include mechanisms for the services you send through, choose an enforcement policy, and it outputs a valid record to publish in DNS. SPF helps receiving servers verify your mail is genuine and reduces spoofing.
Frequently asked questions
- What is an SPF record?
- SPF (Sender Policy Framework) is a DNS TXT record that names the IP addresses and mail services allowed to send email for your domain. Receiving servers check it against the sending server to help detect forged senders and reduce spoofing and phishing.
- How many DNS lookups can an SPF record have?
- SPF is limited to 10 DNS-lookup mechanisms — include, a, mx, ptr, and exists — evaluated during a check. Exceeding 10 causes a permerror and can make SPF fail, so consolidate includes or use IP ranges to stay under the limit.
- What is the difference between ~all and -all?
- Both appear at the end of a record. "-all" (hard fail) tells receivers to reject mail from unlisted servers, while "~all" (soft fail) tells them to accept but mark it as suspicious. Many senders start with ~all and move to -all once confident the record is complete.
- Can I have more than one SPF record?
- No. A domain must publish exactly one SPF TXT record. Multiple SPF records cause a permerror and break authentication. To authorize several services, combine all their include and ip mechanisms into that single record.
Related tools
Still doing this by hand? NeatMail runs it for you, on every email, inside Gmail and Outlook.
Start free