SPF Record Generator

Step 1 of 4

What is your domain?

Enter the domain you want to create an SPF record for. This is the domain in your email addresses (e.g. acme.com).

Domain name

Do not include http:// or www. Just the bare domain.

Step 2 of 4

Select your email providers

Check every service that sends email on behalf of your domain. Each adds one or more DNS lookups to your SPF record. The SPF spec allows a maximum of 10 lookups.

0 DNS lookups used (max 10)

Microsoft 365 include:spf.protection.outlook.com Google Workspace include:_spf.google.com Mailchimp include:servers.mcsv.net SendGrid include:sendgrid.net Mailgun include:mailgun.org HubSpot include:pm.mtasv.net Salesforce include:_spf.salesforce.com Proofpoint include:spf.proofpoint.com

Custom include (optional)

Enter a custom include: mechanism. One DNS lookup per include.

Step 3 of 4

Choose your SPF policy

The policy tells receiving mail servers what to do with email from senders not listed in your SPF record.

~all — Soft fail (recommended)

Email from unlisted senders is accepted but flagged. This is the safest default while you are still identifying all your senders.

-all — Hard fail

Email from unlisted senders should be rejected outright. Only use this when you are confident every legitimate sender is listed.

?all — Neutral

No policy assertion. The receiving server decides on its own. Rarely recommended — provides no protection against spoofing.

Step 4 of 4

Your SPF record

Add this TXT record to your DNS provider. Changes may take up to 48 hours to propagate.

Name @

Type TXT

Value

Sentura monitors your SPF, DKIM, and DMARC health continuously and alerts you when something breaks.

Start free trial Get a demo