SPF Record Generator

SPF (Sender Policy Framework)is one of the three pillars of email authentication, alongside DKIM and DMARC. It's a DNS TXT record that tells receiving mail servers which IP addresses and servers are allowed to send email on behalf of your domain.

When an email arrives at a recipient's server, the server checks the SPF record of the sending domain. If the sending server's IP matches one of the authorized sources listed in the SPF record, the email passes SPF authentication. If it doesn't match, the email may be rejected, quarantined, or flagged as spam — depending on your policy.

For cold email senders, SPF is non-negotiable. Without a properly configured SPF record, your emails will consistently land in spam or be outright rejected. Google, Microsoft, and Yahoo all check SPF as part of their filtering algorithms.

How SPF Works

1. You publish an SPF record in your domain's DNS (TXT record at @)
2. The record lists authorized senders using include:, ip4:, and ip6: mechanisms
3. When someone receives an email from your domain, their server looks up your SPF record
4. The server checks if the sending IP matches any authorized source
5. Based on the qualifier (~all or -all), it decides what to do with unauthorized senders