SPF record generator

Your SPF record

{{ lookups }} / 10 DNS lookups

Type or paste a record here, or use the form below — the two stay in sync.

Your own servers

a — the domain's own A / AAAA records

mx — the domain's MX hosts

Another domain's A records (a:domain)

a:

Another domain's MX records (mx:domain)

mx:

IPv4 addresses / ranges (ip4)

IPv6 addresses / ranges (ip6)

Third-party senders (include)

include:

Exists checks (exists)

exists:

Everything else (all)

How to treat senders that match nothing above.

Redirect (redirect)

The mechanisms above still match first — redirect is only the fallback, and replaces all.

List every source that sends mail as your domain: tick a / mx for your own servers, add provider includes, add any fixed sending IPs — or paste an existing record into the box at the top.
Keep the DNS-lookup count (shown next to the record) at 10 or below — flatten includes to ip4/ip6 if needed.
Copy the record from the box.
Create one TXT record at the domain apex (name @ or blank), value = the record. Delete any other v=spf1 record.
Use ~all while you confirm nothing legitimate is missing, then switch to -all.