Home / Deliverability and DNS records / SPF record generator

SPF record generator

Tick every service that sends email using your domain, and the generator builds one correct SPF record to paste into your DNS. It counts lookups so you stay under the limit of 10.

Services that send email for your domain
Your own servers

Privacy: this tool runs entirely in your browser. Nothing you paste is sent to ListaFix or anyone else.

How to add the record

  1. Sign in where your domain's DNS is managed, such as Cloudflare, Spaceship, GoDaddy or Namecheap.
  2. Look for an existing TXT record starting with v=spf1. If there is one, edit it. A domain must have only one SPF record.
  3. Otherwise add a new TXT record with the host @ and paste the value.
  4. Wait a few minutes, then test it with the SPF and DMARC checker.

~all or -all?

~all (soft fail) tells receivers that mail from unlisted servers is suspicious. -all (hard fail) says it should be refused. Most domains use ~all together with DMARC, which then decides what happens to failing mail. Use -all only when you are sure every service that sends as you is listed.

The 10-lookup limit

Each include, a and mx in an SPF record makes the receiving server look up more DNS records, and the includes often contain more lookups of their own. SPF allows 10 lookups in total; go over and SPF fails for every email. If you're near the limit, remove services you no longer use.

Check with your provider

The include values above are the ones these services publish, but they do change. Some services, such as Mailchimp, Postmark and Brevo, don't need an SPF include at all for most accounts, because they handle the bounce address themselves and authenticate with DKIM. Some values also depend on your region: Zoho Mail accounts in Europe use zohomail.eu and in India zohomail.in, and SparkPost EU uses _spf.eu.sparkpostmail.com. Check your service's own setup instructions and use what they give you.

What the SPF record generator does

The SPF record generator builds the one SPF record your domain needs so email providers know which services are allowed to send mail as you. You tick the services you use, add any extra servers, and it gives you a ready-to-paste DNS record. It also counts lookups so your record stays under the limit of 10.

Benefits

  • Pick services from a listTick boxes for 20 common senders, including Google Workspace, Microsoft 365, Zoho, Proton, GoDaddy, Amazon SES, SendGrid, Mailgun, Salesforce, Zendesk and Shopify.
  • Add your own servers and IPsInclude your MX servers or website server, and type in IPv4 or IPv6 addresses or ranges. Anything that isn't a valid IP is skipped and listed for you.
  • Room for other servicesAdd include values for any sending service that isn't on the list.
  • Choose how strict to bePick ~all (soft fail), -all (hard fail) or ?all (neutral) for mail from servers you haven't listed.
  • Lookup counter built inThe tool shows how many direct lookups your record uses and warns you when you get close to the limit of 10.
  • Exactly what to enter in DNSThe result shows the record type (TXT), the host (@) and the value, with a Copy button.
  • Helpful warningsIt warns you if the record would block all sending, or if it is longer than 255 characters and may need splitting.
  • Updates as you clickThe record rebuilds instantly each time you tick a box or type, so you can see the effect of every change.

Who it is for

  • Small business owners setting up email on their own domain for the first time.
  • Web developers adding SPF for a client who uses several sending services.
  • Marketers adding a newsletter or transactional email service to an existing domain.
  • IT helpers merging two SPF records into one after a failed check.
  • Shop owners who send order emails through platforms like Shopify alongside their regular inbox.

How to use it

  1. Tick every service that sends email for your domain.
  2. Add your own servers, IP addresses or other includes if you have them.
  3. Choose the rule for everything else. Most domains use ~all.
  4. Copy the record and add it as a TXT record at @ in your DNS, replacing any old SPF record.

Your privacy

The record is built entirely in your browser. Nothing you tick or type is sent to ListaFix or anyone else.

Questions people ask

Can I have two SPF records?
No. Two SPF records make SPF fail. Merge everything into one record, which is what this generator does.
Where does the SPF record go?
In a TXT record on your domain itself, usually shown as host @.
Is SPF enough to stop spoofing?
No. Use SPF with DKIM and a DMARC record. See the DMARC generator.

Related guides on EmailNa