SPF Record Generator

Sender Policy Framework (SPF) is an email authentication method that specifies which mail servers are authorized to send email on behalf of your domain. It is published as a DNS TXT record and helps prevent email spoofing, phishing, and spam.

An SPF record contains a version tag (v=spf1) followed by one or more mechanisms that define authorized sources — IP addresses, domains, or include statements for third-party email services. Each mechanism can have a qualifier that tells receiving servers what to do if a message matches: pass (+), fail (-), softfail (~), or neutral (?). The record ends with a catch-all rule (all) that defines the default action for unmatched senders.

Common use cases include authorizing your own mail server IPs, including your email service provider's SPF record (e.g., Google Workspace, SendGrid, Mailgun), and setting a strict -all policy to reject all unauthorized senders.

1. Enter your domain — Type the domain you want to protect (e.g., example.com).
2. Enable mechanisms — Check the mechanisms you need. For most setups, include (for your email provider), ip4 (for your own mail server IP), and mx (to authorize your MX servers) are the most common.
3. Configure qualifiers — Use the dropdown next to each mechanism to set the qualifier. Pass (+) is the default and appropriate for your own servers.
4. Set the default policy — Choose -all (Fail) to reject all unauthorized senders. This is the recommended setting for strong email authentication.
5. Copy the record — Click Copy and add the TXT record to your DNS zone through your domain registrar or DNS hosting provider.