List every sender
The hosting mail server, a newsletter service, CRM, an invoicing system: everything that sends mail as your domain belongs in one record.
SPF record generator
Choose the servers and services that send your email, and the generator will build an SPF record for DNS. It runs in your browser without querying DNS, so it cannot count nested lookups in mail services’ records. Check the record with the SPF checker after publishing it.
One per line or comma-separated. Single addresses and networks with a mask both work, IPv4 and IPv6. No need to type the ip4: prefix.
The include: name from your mail service’s help pages, one per line or comma-separated, without include: itself. The buttons below add common services.
Add a service:
Your record
- Name
@- Type
TXT- Value
How to build an SPF record
Start with ~all
~all tells the recipient that the message came from a server outside your list. Once you have included every sender, you can choose -all. Neither ending alone guarantees delivery or rejection.
Replace, don’t add
If the domain already has a v=spf1 record, edit it. A second record breaks the recipient’s check.
SPF record questions
Where to add an SPF record, how to save a long value and when to include the website server.
Where do I add the SPF record?
In the domain’s DNS, where the A and MX records are: in the registrar’s, hosting or DNS provider’s panel, depending on whose name servers the domain uses. The type is TXT and the name is the domain itself; in most panels that’s @ or an empty field. The value is the whole line from the generator; panels usually add the quotes themselves.
My SPF record is longer than 255 characters. What now?
A TXT record can contain several strings of up to 255 characters each. They are joined without adding spaces when read. Many DNS panels split long values automatically. If yours does not, follow its instructions for entering multiple strings in one record. Do not create multiple separate SPF records. Text length alone does not determine the DNS lookup count, which needs a separate check.
Should I tick the website server?
Only if the website sends mail itself, such as order notifications, password resets or contact forms, and does so from its own server rather than through a mailbox or a newsletter service. On hosting with mail in the plan, the website usually sends through the same mail server as the mailboxes, and ticking “MX servers” is enough.
More tools: Domain email
Email settings checker
MX, SPF, DKIM, DMARC and blacklists in one go, scored out of nine.
OpenSPF checker
Check an SPF record for errors, the DNS lookup limit and sender rules.
OpenDKIM checker
Find a DKIM key in DNS and check its length and status.
OpenDMARC checker
Whether there is a record, which policy it sets and where reports go.
OpenMX lookup
The domain’s mail servers, their addresses, reverse DNS and encryption.
OpenBlacklist check
Check an IPv4 address or a domain’s mail server IPs against blacklists.
OpenDMARC generator
Choose how to handle messages and where to send DMARC reports.
OpenEmail on your own domain comes with hosting
On our hosting, mailboxes on your domain are part of the plan, and mail records are set up in the Plesk panel.
Keep domain records on reliable DNS
Host MX, SPF, DKIM and DMARC on our name servers: you edit records yourself at any time, the domain can stay with any registrar and mail with any provider.