Email authentication

SPF Record Generator

Generate a valid SPF record for Google Workspace, Microsoft 365, Amazon SES, SendGrid and more. Free SPF generator with live DNS-lookup checks.

Configure your SPF record

Pick every service that sends email for your domain. The record updates instantly.

Your own servers
Third-party senders

Your SPF record

v=spf1 mx include:_spf.google.com -all
2 / 10
DNS lookups
-all
Policy
38 chars
Length
2 of 10 DNS lookups used — comfortably within the limit.
"-all" (hard fail) is the strongest policy — recommended once all senders are listed.

Add this as a TXT record on your root domain, then let AI review it.

What this SPF generator does

Builds an RFC 7208-valid v=spf1 record in the correct term order
Presets for Google Workspace, Microsoft 365, SES, SendGrid and more
Counts DNS lookups live so you never blow the 10-lookup limit
Warns on weak ?all policies and invalid IP addresses
One-click copy, ready to paste as a TXT record
AI review of your record with plain-English fixes

Common use cases

  1. 1Setting up email authentication for a new domain
  2. 2Adding a new sending service (CRM, newsletter, helpdesk) to SPF
  3. 3Fixing a "too many DNS lookups" permerror
  4. 4Hardening ?all / ~all to -all once senders are confirmed
  5. 5Documenting exactly which servers may send as your domain
  6. 6Preparing SPF before configuring DKIM and DMARC

Related tools

SPF Record CheckerDKIM key generatorDMARC generatorSPF flattenerSPF lookup counterEmail Authentication Analyzer

About SPF records

An SPF (Sender Policy Framework) record is a TXT record in your DNS that lists every server and service allowed to send email using your domain. Receiving mail servers check it to decide whether a message is genuine or spoofed, so a correct SPF record protects your brand and improves inbox placement.

SPF permits at most 10 DNS-querying mechanisms (each include, a, mx and redirect counts). Exceed it and the record fails with a permerror — this tool tracks the count as you build so you stay within budget. Publish exactly one SPF record per domain, then pair it with DKIM and DMARC for full protection.

More Free Tools Where This Came From

This utility is one of dozens of free, no-login tools for DNS, email, SEO and developers — all instant and private.

See All ToolsTalk to Our Team

HostCloud.in  ·  Pune, India  ·  Serving 34,987+ Websites Since 2020

FREQUENTLY ASKED QUESTIONS

Got Questions? We Have Answers.

What is an SPF record?

An SPF (Sender Policy Framework) record is a DNS TXT record that lists every server and service allowed to send email for your domain. Receiving mail servers use it to detect and reject spoofed messages.

How do I add the generated SPF record to my domain?

Copy the record, then create a TXT record on your root domain (host "@") with the generated value. Changes can take up to a few hours to propagate across DNS.

Can I have more than one SPF record?

No. RFC 7208 allows only one v=spf1 record per domain — multiple records cause a permerror. If you have several, merge all their mechanisms into a single record.

What is the 10 DNS lookup limit?

SPF permits at most 10 DNS-querying mechanisms (each include, a, mx and redirect counts). Exceeding it makes the record fail with a permerror. This generator counts lookups live so you stay within the limit.

Should I use -all or ~all?

Start with ~all (soft fail) while you confirm every legitimate sender is listed, then tighten to -all (hard fail) for the strongest anti-spoofing protection.

Does SPF alone stop email spoofing?

No. SPF is one layer. Combine it with DKIM (message signing) and a DMARC policy for complete domain protection.