SPF Record Generator
List all the servers and services authorized to send email from your domain to prevent spoofing.
Your Generated SPF Record:
DNS Lookups Used: 0 / 10
What is an SPF Record?
SPF (Sender Policy Framework) is a fundamental email authentication standard that helps prevent email spoofing. It allows a domain owner to specify which mail servers they authorize to send email on behalf of their domain.
When an email is received, the recipient's mail server checks the SPF record of the sending domain. If the server that sent the email isn't on the authorized list, the email fails the SPF check. This is a critical first step in building a DMARC policy and securing your email communications.
SPF Generator FAQs
What is the SPF 10 DNS lookup limit?
The SPF specification states that an SPF record cannot generate more than 10 DNS lookups (e.g., from `include:`, `a:`, `mx:` mechanisms). Exceeding this limit will cause a 'PermError' and make your SPF record invalid for some receivers. Our generator helps you monitor this limit.
What's the difference between -all and ~all in an SPF record?
'-all' (Hard Fail) instructs the receiving server to reject any mail from a sender not listed in your SPF record. '~all' (Soft Fail) suggests the server should accept the mail but mark it as suspicious. For effective security and DMARC alignment, '-all' is strongly recommended.