SPF Record Generator

Build a valid SPF record for Google Workspace, Microsoft 365, SendGrid and more in seconds. \ Free, with no signup.

Who sends email for your domain?

Other includes (optional)

IPv4 addresses to authorise (optional)

Policy for everyone else

Soft fail (~all) — recommended

Build a valid SPF record for Google Workspace, Microsoft 365 and more in seconds. Free and generated entirely in your browser.

How it works

1

Pick your senders

Select the providers that send email for your domain.

2

Add IPs & includes

Authorise any extra IP addresses or include domains.

3

Choose a policy

Use ~all (soft fail) to start safe, then tighten later.

4

Add to DNS

Copy the TXT record and add it to your domain's DNS.

Set up SPF the right way

SPF tells the world which servers are allowed to send email as your domain. Get it wrong — or miss a sender — and your legitimate cold emails can land in spam or be rejected.

This generator assembles a valid SPF record from the providers you actually use, so you don't have to remember the exact include syntax for Google, Microsoft, SendGrid and the rest.

SPF is one part of deliverability

SPF, DKIM and DMARC together authenticate your domain — but authentication alone won't save you if you email invalid addresses and rack up bounces.

Verify every recipient with Emailchaser's free email verifier to keep your bounce rate low and your sender reputation healthy.

Common questions about SPF records

What is an SPF record?


An SPF (Sender Policy Framework) record is a DNS TXT record that lists which servers are allowed to send email for your domain. Receiving servers check it to help decide whether your mail is legitimate — a key part of email deliverability and stopping spoofing.

How do I create an SPF record?


Pick the providers that send email for you (Google Workspace, Microsoft 365, your ESP), add any extra includes or IPs, choose a policy, and generate. Then add the result as a TXT record on your root domain. You should have only one SPF record per domain.

What does ~all vs -all mean?


The 'all' mechanism sets the policy for senders not listed. ~all (soft fail) marks unlisted mail as suspicious but still accepts it — the safe default. -all (hard fail) rejects it outright, which is stricter but riskier until you're sure every sender is included. ?all is neutral.

Is the SPF record generator free?


Yes — it's free, needs no signup, and builds the record entirely in your browser.

Ready to 10x your pipeline?

Send your first cold email campaign today, risk-free.

Try for free