Octeth v5.7.0 Now Available! See What's New
Octeth
Free Generator Tool

SPF Record Generator

Create a customized SPF DNS record for your domain to prevent email spoofing and maximize deliverability. Generate your SPF record in seconds—no technical expertise required.

Enter your domain without http:// or www

Authorize your MX servers to send email

Authorize your domain's A record IP

Separate multiple addresses with commas. Supports CIDR notation (e.g., 192.168.1.0/24)

Separate multiple addresses with commas. Supports CIDR notation

Add SPF domains for email services like Google Workspace, Microsoft 365, Mailchimp, etc.

Tip: Start with "SoftFail" (~all) to monitor, then switch to "Fail" (-all) after verifying all legitimate senders are included.

Understanding SPF Records and Their Importance

What is an SPF Record?

SPF (Sender Policy Framework) records are DNS TXT records that specify which mail servers are authorized to send emails on behalf of your domain. By defining these authorized servers, SPF records help prevent email spoofing—where attackers send emails that appear to come from your domain—and significantly improve the deliverability of your legitimate emails.

How to Configure SPF Records

1

Identify Authorized Mail Servers

Determine which mail servers can send emails for your domain—including your primary mail server, backup servers, and third-party services like Google Workspace, Microsoft 365, or marketing platforms.

2

Create Your SPF Record

Use our SPF Record Generator above to build your record. Include the necessary IP addresses, enable A and MX records if needed, and add any third-party service domains.

3

Add the SPF Record to Your DNS

Log in to your DNS provider's management console and add the generated SPF record as a TXT record for your domain. Use "@" or leave the host field blank.

SPF Mechanism Reference

a

Authorize your domain's A record IP address

mx

Authorize your domain's MX record servers

ip4:address

Authorize a specific IPv4 address or range

ip6:address

Authorize a specific IPv6 address or range

include:domain

Include another domain's SPF record

-all / ~all

Fail or SoftFail unauthorized senders

Protect Your Email Infrastructure

Security Guide

Email Infrastructure Security: Protecting Against Cyber Threats in High-Volume Sending

In the realm of high-volume email sending, cybersecurity presents a complex challenge requiring a vigilant and multifaceted approach. Learn how to safeguard your email infrastructure against modern threats.

Learn More

Related Deliverability Tools

SPF Record Validator

Validate SPF records against standards

SPF & DKIM Checker

Verify both SPF and DKIM records

DKIM Generator

Create DKIM key pairs

DKIM Validator

Validate DKIM configuration

DMARC Generator

Generate DMARC policies

All Tools

Browse all free tools

Need Enterprise Email Infrastructure?

Octeth provides self-hosted email marketing software with built-in deliverability tools. Own your infrastructure and save on SaaS fees.

Get Octeth Free More Free Tools