Free SPF Generator

Generate your SPF record

Pick the services that send email for your domain and we’ll build a valid v=spf1 record — ready to copy into your DNS, with a live count against SPF’s 10-lookup limit.

DNS lookups used (include: mechanisms)0 / 10

Add this DNS record

Type
TXT
Host / Name
yourdomain.com

Value

v=spf1 ~all
10DNS-lookup limit your generated SPF record must stay under — we count it as you build.

Why your SPF record has to be exactly right

SPF is the DNS record that authorizes which servers may send email for your domain. Get it slightly wrong — a typo, a missing provider, the wrong ending mechanism — and receivers treat your legitimate mail as suspicious and route it to spam.

Because nothing visibly errors when SPF is misconfigured, a bad record can sit there for months while your deliverability slowly erodes. Generating it correctly from the start removes the single most common cause of “why is my email going to spam.”

The mistakes a generator prevents

Two rules people break constantly: a domain may have only one SPF record (two is invalid and disables SPF entirely), and the record may use at most 10 DNS lookups. Every include: you add counts toward that limit.

This generator enforces both — it produces a single combined record and counts your lookups as you go, so you don’t quietly cross the limit and trigger a PermError that fails SPF for all your mail.

One SPF record per domain, and never more than 10 lookups — break either rule and SPF fails for ALL your mail.

How Zeqo keeps your SPF healthy

Publishing the record is step one; keeping it valid is the ongoing job. Providers change their sending IPs, teammates add new tools, and your lookup count creeps upward over time.

Zeqo Mail monitors your live SPF record every day, tracks your lookup count, and alerts you before you cross the limit or someone breaks the record — with the exact fix, not just a warning.

Start monitoring free →

Frequently asked questions

How do I create an SPF record?+

List every service that sends mail for your domain as include: mechanisms (or ip4:/ip6: for your own servers), then end with ~all. This generator builds that string for you from a checklist of common providers.

What is the difference between ~all and -all?+

~all (softfail) marks unauthorized mail as suspicious but still delivers it; -all (hardfail) tells receivers to reject it outright. Start with ~all, then move to -all once you’re sure every sender is included.

Can I have more than one SPF record?+

No — a domain must have exactly one SPF record. If you use several providers, combine them into a single record with multiple include: mechanisms, which is what this generator produces.

Where do I publish the SPF record?+

As a TXT record on your root domain (the apex), with the value the generator produces.

Keep reading