Free email DNS tool
SPF record generator
Assemble an SPF TXT record from includes, ip4/ip6 addresses, and a/mx mechanisms, with a live DNS-lookup counter.
Generated DNS TXT value
SPF record
Publish this TXT value on example.com (empty or @ host). Only one SPF record per domain.
v=spf1 include:sendgrid.net ~all
When this helps
Use this generator when onboarding a sending domain, wiring up an ESP like SendGrid or Google Workspace, or trimming a bloated SPF record that already exceeds the lookup limit.
Record checklist
- One SPF record per domain — duplicates break evaluation.
- Keep total DNS lookups (include, a, mx) under 10.
- Start with
~all, tighten to-allonce delivery is stable. - Pair SPF with DKIM and DMARC for full authentication.
Related tools
TempMailito angle
After publishing SPF, send test messages to a temporary inbox and inspect the received headers to confirm your record evaluates the way you expect.
Create temporary inboxFAQ
SPF generator questions
Where do I publish an SPF record?
Publish the generated TXT value on the bare domain (for example example.com) with an empty or @ host name in your DNS panel.
What does the qualifier before all mean?
The qualifier sets the fallback policy: ~all is softfail (allow but mark), -all is hard fail, ?all is neutral, and +all passes everything. Most setups start with ~all while testing.
Why does SPF have a 10-lookup limit?
Receivers stop evaluating SPF after 10 DNS lookups for mechanisms like include, a, mx, ptr, exists, and redirect. Too many includes causes a permerror, so keep the lookup count low.