Free SPF generator
Build a correct SPF record
Pick who sends email for your domain and we'll build the record — correctly ordered, correctly formatted, ready to paste into your DNS.
Who sends email for this domain?
What should happen to mail that doesn't match?
Your SPF record
v=spf1 include:_spf.google.com -allUses roughly 1 of the 10 allowed DNS lookups.
To publish this:
Add a TXT record at your domain's root (usually just @ in most DNS dashboards) with the value above. If a TXT record starting with v=spf1 already exists, replace it — a domain can only have one SPF record.
After publishing, verify it with the SPF checker.
How this builder works
Each sender you add becomes one mechanism in the record — include: for a provider's own SPF domain, ip4:/ip6: for a literal IP, and so on — assembled in the correct order with your chosen enforcement level at the end.
This tool builds the record; it doesn't publish it for you, and it doesn't know how many DNS lookups your chosen providers' own records add on top of what's shown here (an include: to a provider whose own record has 5 more includes still only counts as 1 lookup at this level, but adds more once fully resolved). Check the final published record with our SPF checker to see the true total.
Common questions
Can I have more than one SPF record?+
No — a domain can only have one TXT record starting with v=spf1. If you use multiple email providers (say, Google Workspace for regular mail and a marketing tool for newsletters), they all need to go into the same single record, which is exactly what the sender list above is for.
Which "all" option should I choose?+
Start with ~all (softfail) while you confirm every legitimate sender is included, since a mistake here only gets flagged, not blocked. Once you're confident the list is complete and correct — usually after checking your DMARC reports for a week or two — move to -all for real enforcement.
I don't see my email provider in the dropdown. What do I add?+
Check your provider's setup documentation for the exact SPF include value — search "[provider name] SPF record" and they'll usually give you a domain to add with include:. Add it using the "Another provider" option above.
Do I need to add my website host or CDN to this record?+
Only if that service actually sends email on your domain's behalf (like a contact form that emails from your domain). Most website hosts and CDNs never send mail, so they don't belong in your SPF record — adding unnecessary entries just burns your lookup budget.
What happens after I publish this record?+
DNS changes typically propagate within minutes to a few hours depending on your provider's TTL settings. Run our SPF checker afterward to confirm it published correctly and see your live lookup count.
More free checks