trustyourinbox

Build an SPF record from your senders.

Pick the services that send mail for your domain and we assemble a valid v=spf1 record. Then check it stays under the 10-lookup limit that breaks SPF when you go over.

Which services send your email?

Don't see yours? Add its include: or IP ranges under advanced options.

What happens to mail from servers not listed?

Start with ~all while you confirm every sender is listed, then switch to -all once you're confident nothing legitimate is missing.

Publish this record in DNS

Add one TXT record at your domain apex. It updates live as you change the options above. A domain may publish only one SPF record.

Host / name
@ (your domain apex)
Type
TXT
Value
v=spf1 ~all
Pick at least one service to check the lookup count.

What to do next

  1. 1.Publish the TXT record above at your domain apex (@ (your domain apex)). Replace any existing SPF record: a domain may have only one.
  2. 2.Keep the lookup count under 10. If you're close, prefer literal ip4: ranges over more includes.
  3. 3.Re-run the SPF tester after publishing to confirm it resolves the way you expect.