SecVaultAuditor
PL
Free generator, no sign-up

SPF record generator

Tick where you send company email from. You get one valid TXT record to paste into your DNS panel, with an explanation and a DNS lookup counter.

Email provider

Yours is not listed? Tick "servers from MX" or enter the include value from your provider's panel (see the guides).

Own servers
Other services, IP addresses and the ending

We build the record from your choices. We store nothing and do not query the domain's DNS.

The most common mistakes in an SPF record

  • Two SPF records on one domain: receivers treat both as invalid. There must be one, with all services in it.
  • More than 10 DNS lookups (include, a, mx): the whole record stops working.
  • Ending with +all or ?all: any server in the world can send "from you".
  • A forgotten service: a shop or invoicing system sends from your domain but is missing from the record, so its mail goes to spam.

SPF checks only the envelope address of a message. It protects against spoofing only together with DKIM and DMARC: DMARC generator.