K09 Tools

Free SPF record generator

Tick the services that send email for your domain and get a valid SPF record to paste into your DNS. The page counts DNS lookups live, so you won't break the 10-lookup limit.

1. Who sends email for your domain?

2. Other IP addresses or includes (optional)

3. What should happen to mail from anywhere else?

TXT record · Host: @

    

Already published it? Check it.

DNS changes can take a few minutes to show up. Then run the free SPF, DKIM & DMARC checker. Managing many domains? The bulk deliverability checker audits hundreds at once for $8 per 1,000 domains.

Bulk-check domains on Apify

FAQ

Where do I add the SPF record?

In your domain's DNS settings (at your registrar or DNS host), add a TXT record with host @ and the value above. A domain may have only one SPF record. If one already exists, replace it with the combined record.

Should I use -all or ~all?

Start with ~all while you confirm every sender is listed. Once your DMARC reports show all legitimate mail passing, you can switch to -all. Never use +all, which lets anyone send as you.

What is the 10 DNS lookup limit?

Receivers stop evaluating SPF after 10 DNS-querying terms (include, a, mx, exists, redirect), counted through every nested include. Going over makes SPF fail. See our guide: How to fix "SPF too many DNS lookups".

My provider isn't listed.

Look up "SPF" in your provider's help pages and paste the include (for example spf.provider.com) or IP ranges into box 2.