NewObject Storage is live: S3-compatible, 10 GB of storage free every month, pay as you go beyond that.Learn more

SPF Record Generator

Pick the services that send email for your domain and add your own servers to build a valid SPF record — with a running count of DNS lookups against the limit of 10.

Mail services
Your own servers
Type
TXT
Name / host
@
Value
v=spf1 include:_spf.mail.yeapcloud.net -all

1 DNS lookup(s) in this record, plus any inside the includes (limit 10)

How it works

SPF in short

One record per domain

A domain must have exactly one SPF record. Merge all senders into it instead of adding a second v=spf1 TXT record.

The 10-lookup limit

include, a, mx, ptr, exists and redirect each cost a DNS lookup, including those nested inside includes. Above 10, receivers treat SPF as broken.

SPF is not enough alone

SPF checks the envelope sender only. Combine it with DKIM and DMARC so the visible From address is protected too.

FAQ

Frequently asked questions

-all or ~all?

Use ~all while you are still finding all your senders and -all once the record is complete. With DMARC in place, both work well.

Domains that send no email?

Publish v=spf1 -all (select no services) together with a DMARC p=reject record so nobody can send as that domain.