SPF Record Generator
Create a valid SPF record to authorize your email senders. No signup required. Just configure and copy.
Configure your SPF record
Your SPF Record
SPF Best Practices
10 Lookup Limit
SPF is limited to 10 DNS lookups. Each "include" counts as at least one lookup. Use IP addresses when possible.
Start with Soft Fail
Use ~all (soft fail) initially. Move to -all (hard fail) after confirming all legitimate senders are included.
One SPF Record
Only one SPF record per domain is allowed. If you have an existing record, merge the mechanisms.
Combine with DMARC
SPF alone doesn't prevent spoofing. Use with DMARC to get reports and enforce authentication.
Monitor your SPF and DMARC together
DDMARC shows you which senders pass or fail SPF, DKIM, and DMARC. Identify misconfigured senders before they cause delivery issues.
More free tools
DMARC Report Analyzer
Paste or upload a DMARC aggregate (RUA) report and see total volume, pass/fail rates, and which senders are failing. Runs in your browser.
Use ToolDMARC Record Generator
Create a valid DMARC record for your domain. Configure policy, reporting emails, and advanced options.
Use ToolDomain Checker
Check your domain's email authentication setup. See your SPF, DKIM, DMARC, and MTA-STS configuration.
Use ToolDMARC Record Lookup
Look up any domain's DMARC record and get every tag explained — policy, alignment, reporting, and coverage.
Use ToolDKIM Record Checker
Check a domain's DKIM record by selector. See the key type, size, and each tag, with quick-picks for common providers.
Use ToolMTA-STS & TLS-RPT Checker
Check a domain's MTA-STS policy record and TLS-RPT reporting — the pair that forces inbound mail over TLS.
Use ToolBIMI Record Checker
Look up a domain's BIMI record, preview the logo, and confirm the VMC and DMARC enforcement it requires.
Use Tool