Free tool
Free SPF record generator
Pick the services that send email for your domain and copy a ready-to-paste SPF record.
Your SPF record
- Type
- TXT
- Host / name
- @ (your domain)
- Value
- v=spf1 include:_spf.google.com ~all
Keep exactly one SPF record per domain. If one already exists, replace it with this one instead of adding a second.
Reachbox keeps checking SPF, DKIM and DMARC on your sending domains and warms up every mailbox for free before campaigns start. Start a free trial →
What an SPF record does
SPF (Sender Policy Framework) is a TXT record on your domain listing the servers allowed to send email for it. When Gmail or Outlook receive a message from your domain, they check the sending server against this list. Since 2024, Google and Yahoo require SPF or DKIM from every sender.
How to add it
- Open the DNS settings where your domain is hosted (for example Cloudflare, GoDaddy or Namecheap).
- Look for an existing TXT record that starts with v=spf1. If there is one, edit it instead of adding a second.
- Create or edit a TXT record with the host @ (or leave the host blank) and paste the value from this tool.
- Save, wait a few minutes, and check it with our SPF, DKIM and DMARC checker.
Added the record? Make sure it is live and correct. Check my domain →
Common mistakes
- Two SPF records on one domain. Receivers treat this as an error and SPF fails.
- More than 10 DNS lookups. Every include costs at least one, and some cost several.
- Using +all, which lets anyone send as your domain.
- Forgetting a service, such as your CRM or invoicing tool, so its email fails SPF.
Nothing you enter leaves this page. The record is built in your browser.
Questions
Can I have more than one SPF record?
No. A domain must have exactly one TXT record starting with v=spf1. If you use several services, put all their includes in one record, which is what this generator does.
What is the SPF 10 lookup limit?
Receivers stop after 10 DNS lookups while checking SPF, and the check then fails. Each include uses at least one lookup and may use more for the includes inside it. Remove services you no longer use, or send bulk mail from a subdomain with its own SPF record.
Should I use ~all or -all?
~all (soft fail) is the safer choice for most senders, especially for cold email, because a forgotten service is marked suspicious rather than rejected. -all is stricter and fine once you are sure every sender is listed. Pair either one with DMARC.
Do I need SPF on a separate cold email domain?
Yes. Every domain you send from needs its own SPF record, plus DKIM and DMARC. A typical cold email domain on Google Workspace needs just v=spf1 include:_spf.google.com ~all.