List every legitimate sending service
Add only include domains supplied by the mail services that send for your domain. The generated record is a starting point; nested mechanisms still count toward SPF limits.
Free public generator
Generate a basic SPF record from include domains and the chosen all mechanism.
Your result will appear here.
Run the check to see structured findings, severity, evidence and next steps from the public diagnostics API.
The details
Add only include domains supplied by the mail services that send for your domain. The generated record is a starting point; nested mechanisms still count toward SPF limits.
~all is a soft-fail, -all is a hard-fail and ?all is neutral. Confirm all legitimate sources before choosing a stricter result.
DNS can vary by resolver and change over time. Verify important changes with your DNS provider and mail platform. Public DNS checks cannot see every private report or sending configuration.
Explore MailConfig ProGenerate a basic SPF record from include domains and the chosen all mechanism.
No. This public tool is available without registration.