Skip to content

SPF Record Builder

Build an SPF record from checkboxes: Microsoft 365, Google Workspace, SES, SendGrid and more, your own IPs, and the 10-lookup limit checked as you go.

An SPF record lists the servers allowed to send mail as your domain. Tick the services you send through, add any servers of your own, and copy the record to your DNS provider as a TXT record on the domain itself. A domain has exactly one SPF record: if you already have one, add to it rather than publishing a second. Each include, a and mx costs a DNS lookup, and SPF allows 10 in total. Runs in your browser.

Domain

Services that send as this domain

Not listed? Use the include your provider's setup guide gives. Some bulk senders use their own return-path domain and need no include at all.

Your own servers

IPv4 addresses or ranges
IPv6 addresses or ranges
Other includes

Mail from anywhere else

No senders chosen: "v=spf1 -all" (with Fail) says this domain sends no mail at all, which is right for domains that never send.

Record to add

NameTypeValue
@ (example.com) TXT v=spf1 ~all

Zone file (BIND) format

example.com.	3600	IN	TXT	"v=spf1 ~all"

Once it's published, SPF Check follows every include and counts the real total of lookups. Then set up DMARC.