Back to Top
From 5 May Microsoft requires DMARC for high volume email senders. Find out if your domain is ready.
Home / Tools / SPF Record Generator

SPF Record Generator

Get an embed

Generate valid SPF records for your domain with EasyDMARC’s SPF record creator

Include IPv4
IPv6 A record MX record Exists
Include IPv4 IPv6 A record MX record Exists
Note: If you are using redirect, the failure policy should not be chosen.
TAGTAG DESCRIPTION
v (required)The version tag. is the only allowed value is "spf1". If it's incorrect or the tag is missing, the SPF record will be ignored.
IP4This tag should include all the IPv4 addresses that are allowed to send emails on behalf of the domain.
IP6This tag should include all the IPv6 addresses that are allowed to send emails on behalf of the domain.
aThe A record tag allows the SPF to validate the sender by the domain name's IP address. If left unspecified, it takes the value of the current domain.
mxThe MX record tag checks the MX record of the mail server(s). If left unspecified, it takes the value of the current domain.
ptr (Not recommended)The PTR tag prompts a PTR check for client IP hostname(s). It's a not recommended tag as per RFC 7208, because it spends too many DNS lookups.
existsThe exists tag checks if an A record exists or not on the mentioned domain.
includeThe include tag is of top importance for a correct SPF record. Listing all your sending sources under this tag lets the recipient know that you verify all the added domains/subdomains as legitimate sources.
all (required)All is a required tag. It should be placed at the end of the SPF record. Depending on the qualifiers used (~, +, -, ?), this mechanism indicates how the recipient should treat emails from non-authorized sources.
RedirectThe "Redirect" mechanism allows a domain to delegate its SPF authentication to another domain by specifying the redirected domain in the SPF record.

What Is EasyDMARC’s SPF Record Generator?

Our SPF Record Generator tool allows you to create a valid SPF record. Generally, SPF provides mechanisms, qualifiers, and modifiers to allow domain administrators to specify IP addresses in a highly flexible way. Our SPF Record Generator tool wizard was designed to make this process fast and easy. Read more about how to create an SPF record here.

An SPF record has a list of tags and values. The structure of an SPF record looks like this:

v=spf1 [mechanism] [modifier] [all]

It should always start with version v=spf1, and it should always end with all tags.

An SPF record is composed of four parts.

  • The first is a version identifier that tells the receiving mail server what version of SPF is being used.
  • The second is a list of mechanisms, which are the different parts of the SPF record that determine how a mail server should handle mail sent from a given email address.
  • The third part is a list of modifiers, which determine how the server should handle mail if it comes from an IP address or domain name that is not on the list of mechanisms.
  • Finally, the fourth part is the all mechanism, which is the default action for mail that does not match any other mechanisms in the record.

The SPF record is a TXT record, so you need to publish it in your DNS as a TXT record as follows

  • Navigate to the DNS for your desired domain
  • Create a new TXT Record
  • Write the name of the domain in the “Host” field
  • Enter the generated SPF record in the “Value” or “Target” column

The SPF record has several limitations:

  • 10 DNS lookup limit. If you exceed this limit, it will result in a permerror
  • No prevention of the From: address spoofing attacks
  • No reporting to evaluate your SPF “health”

Join the 83,500+ companies and 175,000+ domains secured with us