SPF record generator

What the SPF generator does

Tick the services that send mail as your domain and the generator writes one SPF record with the right include for each. It keeps a running count of DNS lookups as you add senders, so you see the limit of 10 coming before you publish.

You can add your own servers as ip4 and ip6 ranges, which cost no lookups, and choose how the record ends: -all to reject unlisted senders, or ~all to soft fail them while you finish the list.

Choosing what to include

List every service that sends mail with your domain in the Return-Path: your mailbox provider, a sequencer that sends over its own SMTP, your CRM, help desk, billing and marketing tools. A tool that sends through your Google or Microsoft inboxes is already covered by that provider's include.

If a service uses its own bounce domain, it doesn't need to be in your record at all. Check its docs before you add it. An include you don't need costs lookups and widens the set of servers that can pass as you.

How to publish the record

Create one TXT record at the root of the domain, the host most DNS panels show as @, with the generated value. If a v=spf1 record already exists, replace it. Never add a second one.

Most DNS hosts take the value without quotes and add them for you. A record longer than 255 characters has to be stored as several strings inside one TXT record, and receivers join them back together without spaces.

Then run the SPF checker to confirm the record resolves and the lookup count matches what the generator showed.

Why it matters for cold email

A new sending domain should have SPF before warmup starts. Gmail and Yahoo require SPF or DKIM from all senders, and both from bulk senders.

Keep sending domains simple. A cold email domain usually sends through one mailbox provider, so its record can be a single include and an all. Marketing tools and the help desk belong on your main domain or their own subdomain. Fewer includes means fewer lookups and fewer ways for the record to break.