SPF record generator

Pick the services that send email for your domain. The record and the DNS lookup count update as you go. What is SPF?

Your domain

Your own servers My MX servers send mail (mx)Common for self-hosted mail. 1 lookup. My web server sends mail (a)The IPs of example.com's A/AAAA records. 1 lookup.

Additional IP addresses or ranges (no lookups)

Email services

Google Workspace include:_spf.google.com ~4 Microsoft 365 include:spf.protection.outlook.com ~1 SendGrid include:sendgrid.net ~1 Mailgun include:mailgun.org ~2 Amazon SES include:amazonses.com ~1 Mailchimp Transactional include:spf.mandrillapp.com ~1 Postmark include:spf.mtasv.net ~1 Brevo include:spf.brevo.com ~1 Zoho Mail include:zohomail.com ~1 Fastmail include:spf.messagingengine.com ~1 Proton Mail include:_spf.protonmail.ch ~1 Salesforce include:_spf.salesforce.com ~2 Zendesk include:mail.zendesk.com ~1

Other includes (from your provider's documentation)

Everything else

Unlisted senders are accepted but marked suspicious. A safe starting point, especially with DMARC.

TXT example.com

v=spf1 mx include:_spf.google.com ~all

Estimated DNS lookups 5/ 10

Nested includes are estimated; run a scan after publishing to get the exact count.

Publishing

Create a TXT record at example.com (the root, often shown as @).
Replace any existing v=spf1 record. There must be only one.
Wait for DNS to update, then scan example.com.

PulsarProtect

Free email and domain security scanner. SPF, DKIM, DMARC, MTA-STS, DANE, DNSSEC, blacklists and more, in one report.

Product

Domain scanner
Blacklist check
SPF record generator
DMARC record generator

Learn

SPF
DKIM
DMARC
MTA-STS
BIMI
DANE
DNSSEC
Blacklists

About

Privacy
Pulsarpoint