SPF Record Builder

Build a Sender Policy Framework DNS TXT record for your domain.

Authorised Senders

mx — servers in your MX recordsa — servers in your A record

ip4: IPv4 addresses or CIDR ranges

ip6: IPv6 addresses or CIDR ranges

include: Third-party senders (e.g. Mailchimp, SendGrid)

Policy (all)

~all (Softfail)

Accept but mark as suspicious — recommended for new setups

-all (Fail)

Reject email from unlisted servers — strict, recommended once stable

?all (Neutral)

No policy statement — not recommended

+all (Pass)

Allow any server — not recommended, disables SPF protection

DNS TXT Record

v=spf1 mx ~all

Add this as a TXT record on your domain — name: @ (or your domain), TTL: 3600.

What is SPF?

SPF (Sender Policy Framework) is a DNS TXT record that lists the mail servers authorised to send email for your domain. When a receiving server gets an email, it checks the SPF record of the From domain to verify the sender. Use ~all (softfail) when first deploying, then switch to -all (hard fail) once you are confident all legitimate senders are listed. Pair with DKIM and DMARC for full email authentication.

Private & free — this tool runs entirely in your browser.