Free SPF record generator
Pick the services that send email for your domain and get a valid, copy-paste SPF TXT record — with your DNS lookups estimated, nested ones included, so you don't blow past the 10-lookup limit. No signup.
Which services send email for this domain?
Pick every tool that sends fromyour domain. Running cold email on Instantly or Smartlead? Choose the mailbox provider your inboxes are on (Google or Microsoft) — that's what SPF authorizes.
Comma-separated domains from any provider not listed above.
Comma-separated IPv4 or IPv6 addresses that send directly.
What about mail from anyone else?
v=spf1 include:_spf.google.com ~all
- Type
- TXT
- Host / Name
- @ (the root domain)
- Value
- v=spf1 include:_spf.google.com ~all
Estimated DNS lookups: ~4 of 10 max. This counts the nested lookups hidden inside each include (Google's alone expands to about four), so it's an estimate, not a flat include count.
Publish this as a single TXT record on your root domain. A domain must have exactly one SPF record — if one already exists, merge the includes into it rather than adding a second.
What an SPF record does
SPF is a single TXT record listing every service allowed to send email for your domain. Receiving servers check it to confirm the sender is really you. For cold email it's non-negotiable — no SPF is one of the fastest routes to the spam folder, and Google and Yahoo require it from bulk senders.
The two rules people break
First: one SPF record per domain. Two SPF TXT records is invalid and fails both — if you already have one, merge new includes into it. Second: the 10-lookup limit. Every include:costs at least one DNS lookup — and often more, since includes nest (Google's expands to about four). Going over ten breaks the record with a permerror. This generator estimates the real total, nested lookups included, and warns you before you go over.
SPF is one leg of three
SPF authorizes senders; DKIM signs your mail; DMARC ties them together and tells receivers what to do on failure. Set up all three with the SPF, DKIM & DMARC guide, check your DMARC with the DMARC checker, then confirm the whole domain with the deliverability checker.