SPF record generator
Tick every service that sends email using your domain. The record updates as you type.
This generator runs entirely in your browser. Nothing you type is sent to us or anyone else. Copy the result into your DNS provider's panel as a TXT record.
Your record
Host: @ (your domain itself), type TXT
Provider values come from each provider's guide: Google Workspace, Microsoft 365, Zoho Mail. Syntax: RFC 7208.
FAQ
-all or ~all?
-all tells receivers to reject mail from servers not listed; ~all marks it as suspicious. With DMARC in place, either works; -all is stricter.
I have two SPF records. Is that OK?
No. A domain must have exactly one SPF record (RFC 7208). Merge them into one, which this generator does.
What is the 10-lookup limit?
Each include, a and mx costs a DNS lookup. Over 10, receivers treat SPF as an error. The counter below shows your total for the parts you add here; nested includes inside a provider's record also count.