Build an SPF record from your senders.
Pick the services that send mail for your domain and we assemble a valid v=spf1 record. Then check it stays under the 10-lookup limit that breaks SPF when you go over.
Which services send your email?
Don't see yours? Add its include: or IP ranges under advanced options.
What happens to mail from servers not listed?
Start with ~all while you confirm every sender is listed, then switch to -all once you're confident nothing legitimate is missing.
Publish this record in DNS
Add one TXT record at your domain apex. It updates live as you change the options above. A domain may publish only one SPF record.
Host / name
@ (your domain apex)
Type
TXT
Value
v=spf1 ~all
Pick at least one service to check the lookup count.
What to do next
- 1.Publish the TXT record above at your domain apex (
@ (your domain apex)). Replace any existing SPF record: a domain may have only one. - 2.Keep the lookup count under 10. If you're close, prefer literal
ip4:ranges over more includes. - 3.Re-run the SPF tester after publishing to confirm it resolves the way you expect.
Was this tool useful?
SPF record built.
Once it is live, monitoring counts your lookups and watches every source stay in alignment as you add tools. Free for one domain.