- Create an SPF record from common providers
- ip4, ip6, include and redirect
- Copy or email the record
SPF Record Generator
Generate valid SPF records for your domain with our professional SPF record creator
Enter the domain you want to create an SPF record for.
Click any provider to add it as an include mechanism. Each provider can only be added once.
Add custom IPs, domains, or DNS records to authorize.
The "Redirect" mechanism allows a domain to delegate its SPF authentication to another domain. This should be used as the last option.
Use the SPF record generator above to create an SPF record in a minute. Pick your providers, add your own servers, choose a policy and copy the finished TXT record into your DNS.
How to create an SPF record
- 1
List every service that sends as you
Think beyond your inbox: CRM, cold email tool, newsletter platform, helpdesk, invoicing. Each one needs to be in the record.
- 2
Build the record
Enter the domain, quick-add providers, then add ip4 or include entries for anything else. Use redirect only if another domain holds your policy.
- 3
Choose the policy
Pick ~all (soft fail) to start. Switch to -all after a few weeks of clean DMARC reports.
- 4
Publish and test
Add one TXT record at the root of your domain, replacing any old SPF record. Then run the SPF checker.
SPF record example for a cold email setup
A typical outreach domain sends from Google Workspace or Microsoft 365 and nothing else. Keep secondary domains this simple. Fewer senders means fewer lookups and fewer ways to fail.
Your main company domain usually needs more entries, because marketing, sales and support tools all send from it.
- Google Workspace: include:_spf.google.com
- Microsoft 365: include:spf.protection.outlook.com
- Own server: ip4:your.server.ip
- One record per domain, always
SPF record generator options explained
Every option in the generator maps to one of these. Each lookup-based mechanism counts toward the limit of 10.
| Part | What it does | Counts as a lookup |
|---|---|---|
| include: | Authorizes another domain's SPF servers, such as your email provider. | Yes |
| ip4: / ip6: | Authorizes a single IP address or a range. | No |
| a / mx | Authorizes the IPs in your domain's A or MX records. | Yes |
| redirect= | Uses another domain's SPF record in place of this one. | Yes |
| ~all | Soft fail: mail from unlisted servers is accepted but marked. | No |
| -all | Hard fail: mail from unlisted servers should be rejected. | No |
Mistakes to avoid when you generate SPF
Adding a second record
Publishing a new SPF record next to the old one breaks both. Edit the existing record.
Including every provider you ever used
Old includes waste lookups and authorize servers you no longer control.
Ending with +all
This authorizes the whole internet. Use ~all or -all.
Forgetting DKIM and DMARC
SPF is one of three records. Gmail and Yahoo expect all three from bulk senders.
Yes. Build as many records as you need, copy them, or email them to whoever manages your DNS. No account needed.
In your DNS provider, such as Cloudflare, GoDaddy or Namecheap. Create a TXT record with host @ (the root domain) and paste the generated value. Replace any existing SPF record.
Yes. Enter the subdomain as the domain, or set the host to the subdomain name in DNS. Subdomains do not inherit the parent domain's SPF record.
v=spf1 include:_spf.google.com ~all covers a domain that only sends through Google Workspace. Add an include for each other service that sends mail as your domain.
Yes. DMARC can pass on DKIM alone, but Gmail and Yahoo expect bulk senders to have both. SPF also helps when a message is not signed.
Further reading
- RFC 7208: Sender Policy Framework The official SPF specification, including the 10 DNS lookup limit.
- Google email sender guidelines Gmail requirements for authentication, spam rates and unsubscribe links.
- Yahoo sender best practices What Yahoo Mail expects from bulk and cold email senders.
Setting up new sending domains?
We buy and configure domains and mailboxes with SPF, DKIM, DMARC and warm-up done, ready for outreach.