SPF Record Generator
Build a valid SPF record for your domain. Add the IPs, includes and a/mx hosts that are allowed to send your mail, pick how strict the policy should be, and copy the finished TXT value to publish. Free and instant in your browser.
Read the guide: How to Create an SPF Recordv=spf1 include:_spf.google.com ~allPublish this as a TXT record on your root domain. Keep only one SPF record per domain.
How it works
- 1
List your senders
Add an ip4, ip6, include, a or mx mechanism for each service that sends mail as your domain, such as your mail host and any newsletters.
- 2
Choose the policy
Pick what should happen to mail from anywhere else: -all to fail it, ~all to soft-fail, or ?all while you are testing.
- 3
Publish the TXT record
Copy the generated value and add it as a single TXT record on your root domain. Keep only one SPF record per domain.
Instant & 100% private — nothing is uploaded
Everything runs locally in your browser. Your code, text and files are processed on your own device and are never sent to a server — so there are no upload waits, no size limits from us, and nothing is ever stored or logged.
Frequently asked questions
- What is the difference between -all and ~all?
- Both tell receivers what to do with mail from a source you did not list. -all is a hard fail, asking them to reject it. ~all is a soft fail, asking them to accept but mark it. Start with ~all while you confirm every legitimate sender is covered, then tighten to -all once you are confident.
- When should I use include instead of ip4?
- Use include when a provider hosts your sending, because their IPs change and the include pulls in their current list (for example include:_spf.google.com). Use ip4 or ip6 for a fixed server you control whose address will not move.
- Can I have more than one SPF record?
- No. A domain must have exactly one SPF TXT record. If you use several mail services, merge all their mechanisms into a single v=spf1 record. Two separate SPF records cause a permanent error and break authentication.
- Is my record sent anywhere?
- No. The record is assembled in your browser from the values you type, so nothing about your domain or senders is uploaded. You can build the record offline once the page has loaded.
More tools
More from the Hivly network
Free sister tools on our other sites.