SECURITY
SPF generator
Create an SPF TXT record and check the record published for your domain. The analysis highlights multiple SPF records and the DNS lookup limit.
SPF settings
Enter sending-service domains one per line (or separate them with commas), e.g. _spf.example.net. Each include counts toward the 10 DNS lookup limit.
Enter domains with their own A/AAAA records, one per line. They become a:domain mechanisms, for example a:web.example.net. Each entry counts toward the DNS lookup limit.
Enter domains with their own MX records, one per line. They become mx:domain mechanisms, for example mx:mail.example.net. Each entry counts toward the DNS lookup limit.
Enter individual IPv4 addresses or CIDR networks, one per line, e.g. 192.0.2.10/32.
Enter individual IPv6 addresses or CIDR networks, one per line, e.g. 2001:db8::10/128.
Optional: if set, the record ends with redirect=domain instead of all, and that domain's SPF record decides for unmatched senders. Useful when one central record serves several domains.
~all marks unlisted senders as softfail; -all rejects them. ?all is neutral and offers little protection. Align the policy with your sending services.
Generated TXT record
TXT record name (FQDN): example.com.
v=spf1 ~all
The record is generated locally in your browser. Review it with your DNS provider before publishing it.
Existing record
Enter a domain and look up DNS to check its published TXT record.