DnsGuard › Guides › SPF › Generator

SPF record generator

An SPF record is one DNS TXT record that lists every server allowed to send email for your domain. Pick the services you send with, add your own servers, choose what happens to everything else, and copy the result into your DNS panel. New to SPF? Read the SPF guide first.

Runs entirely in your browser. Nothing you type here is sent to DnsGuard or stored.

Your domain

Services that send email as your domain (include:)

Include domains, one per line. Your provider's setup page gives the exact value.

Your own servers a: the server your domain's A/AAAA record points to sends mail mx: your inbound mail servers (MX) also send mail IPv4 addresses or ranges (ip4:), one per line IPv6 addresses or ranges (ip6:), one per line

Advanced: exists: and redirect=

exists: domains or macros, one per line (rarely needed) redirect= use another domain's SPF policy instead of an all (leave empty unless you know you need it)

Mail from servers you didn't list Qualifier on all

Your SPF record

Type TXT, name your domain (@), value:

v=spf1 -all

DNS lookups: 0 / 10 (each include, a, mx, exists and redirect counts one; includes can add more)

After you publish it, check your domain to see the real lookup count and your full email score.

How to publish it

In your DNS provider's panel, find the existing TXT record that starts with v=spf1. If there is one, edit it instead of adding a new one. A domain must have exactly one.
Set the name (host) to @ or leave it blank, which means the domain itself, and paste the value.
Wait for the TTL to pass (often 5 minutes to an hour), then run a check.

Tips

Start with ~all if you're not sure you've found every sender, then switch to -all. Once DMARC is enforced, the two are treated much the same.
Stay under 10 DNS lookups. Remove services you've stopped using, and prefer ip4: ranges over a/mx when your server addresses are stable.
Domains that never send email should publish v=spf1 -all on its own.
SPF is only one part. Turn on DKIM in each service and publish a DMARC record.

Check your domain now

Free check of SPF, DKIM, DMARC, BIMI, MX, MTA-STS and TLS-RPT with a 0–100 score and plain-English fixes. No sign-up.

Free tools: SPF record generator · DMARC record generator