logo
Email Security Tools

SPF Record Generator Tool

Build a valid SPF record for your domain so receiving mail servers know which servers are authorized to send email on your behalf.

SPF, or Sender Policy Framework, is a DNS record that tells receiving mail servers which services are authorized to send email from your domain. If your SPF record is missing or incomplete, legitimate email from your CRM, invoicing tool, newsletter platform, or mail provider may land in spam or be rejected entirely.

Follow these three steps to build your record. First, enter your domain name. Second, check every service that sends email on your behalf — if you use Microsoft 365 for email and HubSpot for marketing, check both. Third, choose your policy and copy the generated record into your DNS as a TXT record at the root of your domain.

If you are not sure which services to include, think about every platform that sends email that appears to come from your domain — not just your inbox, but automated invoices, contact form notifications, newsletters, and support replies. Any service not listed in your SPF record will fail authentication.

Your domain
The domain you are creating this record for, e.g. wolferdawg.io
Email providers

Select every platform that sends email on behalf of your domain.

Microsoft 365
Adds include:spf.protection.outlook.com
Google Workspace / Gmail
Adds include:_spf.google.com
Mailchimp
Adds include:servers.mcsv.net
HubSpot
Adds include:_spf.hubspot.com
SendGrid
Adds include:sendgrid.net
Mailgun
Adds include:mailgun.org
Zoho Mail
Adds include:zoho.com
Proofpoint
Adds include:spf.pphosted.com
Salesforce
Adds include:_spf.salesforce.com
Authorize my domain's MX servers
Adds mx — allows the servers in your MX records to send mail
Custom include statements

Add include: entries for any other service not listed above. Enter just the domain, e.g. _spf.example.com

Custom IP addresses

Add specific IP addresses or ranges that send email for your domain. Supports IPv4 (e.g. 192.168.1.1 or 192.168.1.0/24) and IPv6.

Policy (catch-all)

What should receiving servers do with mail from senders not listed in this record?

Generated SPF record
v=spf1 ~all
How to add this to your DNS
  1. Log in to your domain registrar or DNS provider (e.g. Cloudflare, GoDaddy, Namecheap).
  2. Go to DNS settings for your domain.
  3. Add a new TXT record with the host set to @ (or your domain name).
  4. Paste the generated record above as the value.
  5. Save. DNS changes may take up to 48 hours to propagate.
  6. Use the SPF lookup tool to verify your record is live.
Need help getting your records right?
Wolferdawg IT Consulting reviews, fixes, and maintains email security records for small businesses in Lawton, Duncan, and across Southwest Oklahoma.
View Cybersecurity Services

Frequently asked questions

To create an SPF record, identify every mail server and service that sends email on behalf of your domain, then publish that list as a TXT record in your DNS settings. Use the generator on this page to build the correct syntax, then add the result to your domain's DNS as a TXT record.

Your SPF record should include every system that sends email from your domain. This typically includes your primary mail server, Microsoft 365 or Google Workspace if you use them, and any third party services like CRM platforms, invoicing tools, or newsletter software that send email as your domain.

No. A domain can only have one SPF record. If you have multiple systems that send email, you need to combine them all into a single SPF record. Having more than one SPF TXT record will cause SPF to fail entirely.

Other email security tools

SPF Lookup
Check your current SPF record
DKIM Lookup
Check your DKIM record
DKIM Generator
Build a new DKIM record
DMARC Lookup
Check your DMARC record
DMARC Generator
Build a new DMARC record
Back to all email security tools