[ Free tool · Generators ]

SPF Generator

List your sending sources and generate a correct v=spf1 record.

Email providers

IPv4 addresses / ranges

IPv6 addresses / ranges

Other includes

Unlisted senders

TXT value (host: @)

v=spf1 mx include:_spf.google.com ~all

Direct lookups in this record: 2. Each include may add more — verify with the SPF Checker after publishing.

  • 2 top-level lookups.
  • Publish only one SPF record per domain; merge if you already have one.

[ About this tool ]

This SPF generator builds one v=spf1 record from the providers and IP addresses you send from, and warns before you exceed 10 lookups.

How to read the results

  • ›Include every service that sends as your domain.
  • ›Publish only one SPF record on the root domain.
  • ›Use ~all while testing, -all once confirmed.

Frequently asked questions

How do I create an SPF record?

Select your email providers and add any server IPs, then copy the generated record into a TXT record on your root domain.

Learn more in our guide: SPF (Sender Policy Framework)

Enterprise provenance

Why top financial institutions and governments retired their email security dashboards.

Traditional email authentication platforms sell you a dashboard and ask your engineers to do the labour. In high-stakes environments, manual oversight means delayed enforcement, configuration drift and unmonitored shadow domains.

EmailAuth is the agentic email provenance platform. Our agents enforce p=reject, keep third-party senders aligned and move your domains to full RFC 9989 compliance, the new DMARC standard,, with human-in-the-loop auditability.

Governments Large enterprises Tier-1 financial institutions

SaaS · Dedicated tenancy · Air-gapped on-prem · BYOK encryption

[ More tools ]

SPF Checker

Validate your SPF record and check the 10-lookup limit.

SPF Flattener

Turn includes into IP ranges to get under the 10-lookup limit.

SPF CIDR Calculator

Work out an IP range and the exact ip4:/ip6: SPF mechanism.

Full Domain Health Scan

Run every email security check at once and get one score.

DMARC Checker

Look up and explain any domain's live DMARC record.

DKIM Lookup

Verify a DKIM selector is published and the key is valid.