SPF Record Generator
What is an SPF Record Generator?
Generate and validate official RFC 7208 Sender Policy Framework (SPF) DNS TXT records (`v=spf1 ...`). Configure authorized mail servers, IP addresses (`ip4:`), third-party services (`include:` Google Workspace, SendGrid, Mailchimp), and enforcement mechanisms (`~all` softfail vs `-all` hardfail).
Why Use This Tool?
- Email Deliverability: Stop emails from landing in spam folders by publishing valid SPF records.
- Anti-Spoofing Protection: Prevent spammers from sending spoofed emails using your domain name.
- Third-Party Authorization: Authorize services like Google Workspace, Office 365, or Mailchimp to send email on your behalf.
How to Use
- Select default Domain mail authorization (MX records, A records).
- Add third-party include domains (e.g. `_spf.google.com`) or IP addresses.
- Select Enforcement Qualifier (`~all` SoftFail or `-all` Fail) and copy DNS TXT record.
Real Working Example
Input:
Domain: devdeskapp.com | Allow MX: Yes | Include: _spf.google.com | Qualifier: ~all
Output Result:
DNS TXT Record: v=spf1 mx include:_spf.google.com ~all
Important Technical Details & Standards
- RFC 7208 Standard Compliance: Follows official IETF RFC 7208 SPF specifications.
- 10-DNS Lookup Limit Warning: Flags records exceeding the official 10-DNS lookup limit to prevent SPF validation errors.
- Client-Side Generator: Instant record creation in browser memory.
Related Networking & Security Tools
- DMARC Record Generator: Generate DMARC policy records.
- DKIM Record Generator: Generate DKIM DNS records.
- Email Header Analyzer: Analyze SPF/DKIM headers.
Frequently Asked Questions
What is an SPF record?
An SPF (Sender Policy Framework) record is a DNS TXT record listing mail servers authorized to send email for your domain.
What is the difference between ~all (softfail) and -all (hardfail)?
`~all` (softfail) marks unauthorized emails as suspicious; `-all` (hardfail) instructs receiving servers to reject unauthorized emails completely.
What is the 10-DNS lookup limit in SPF?
RFC 7208 limits SPF evaluation to a maximum of 10 DNS lookups (includes, mx, a) to prevent denial-of-service attacks.
Is it free?
Yes, 100% free.
Where do I add the generated SPF record?
Add it as a TXT record in your domain's DNS management console (Cloudflare, GoDaddy, Route 53).