--- title: "Free SPF Record Generator - Build Your SPF Record in 60 Seconds | DMARC Report" description: "Generate a valid SPF TXT record by selecting your email providers and entering custom IPs. Shows the exact DNS record to publish, with live lookup counting and RFC 7208 compliance checking." image: "https://dmarcreport.com/images/og-default.png" canonical: "https://dmarcreport.com/tools/spf-record-generator/" --- ## What Happens After You Generate Your SPF Record? **1\. Publish it as a TXT record at your domain apex.** Log into your DNS provider (GoDaddy, Cloudflare, Namecheap, AWS Route 53, etc.), create a new TXT record with `@` as the host, and paste the generated SPF string as the value. **2\. Verify it with our [free SPF checker](/tools/spf-checker/).** After DNS propagation (typically 5-60 minutes), run a check to confirm the record is published correctly and the lookup count is under 10. **3\. Monitor it over time.** As you add new email services, the SPF record needs updating. Each new `include:` adds DNS lookups. When you approach the [10-lookup limit](/blog/fix-spf-permerror-overcome-too-many-dns-lookups/), use [AutoSPF](https://autospf.com/?utm%5Fsource=dmarcreport&utm%5Fmedium=tool&utm%5Fcampaign=spf-generator) to flatten or switch to macros. ## DNS Lookup Cost by Provider | Provider | Include mechanism | Lookups | | ------------------- | ---------------------------------- | ------- | | Google Workspace | include:\_spf.google.com | 4 | | Microsoft 365 | include:spf.protection.outlook.com | 2 | | SendGrid | include:sendgrid.net | 5 | | Mailchimp | include:servers.mcsv.net | 1 | | Amazon SES | include:amazonses.com | 2 | | Salesforce | include:\_spf.salesforce.com | 2 | | HubSpot | include:spf.hubspot.com | 2 | | Brevo | include:spf.brevo.com | 2 | | Mailgun | include:mailgun.org | 5 | | Zoho Mail | include:zoho.com | 4 | | Postmark | include:spf.mtasv.net | 1 | | SparkPost | include:sparkpostmail.com | 1 | | Custom IP (ip4/ip6) | ip4:x.x.x.x | 0 | Lookup counts are approximate and may change when providers update their infrastructure. Use the [SPF checker](/tools/spf-checker/) for live counts. ## Generated a record that exceeds 10 lookups? Monitor your SPF, DKIM, and DMARC authentication across all your domains. Get actionable reports and move toward full DMARC enforcement. [Start Free Trial](https://app.dmarcreport.com/login) ## Built for IT Teams ![G2 Leader - DMARC](https://media.mailhop.org/dmarcreport/images/g2-badges/DMARC_Leader_Leader.png) Rated 4.8/5 on G2 · 469 verified reviews ![G2 Momentum Leader - DMARC](https://media.mailhop.org/dmarcreport/images/g2-badges/DMARC_MomentumLeader_Leader.png) DG Dave G. Owner 5/5 ### "DMARC Report has been invaluable in fixing email deliverability issues for our clients" DMARC Report dashboard allows us to see easily what is compliant and what isn't compliant so we can quickly fix issues. 9/27/2022Verified on G2 AL Antoine L. 5/5 ### "Incredible Service for an affordable price" The software is easy to use and has also an entry friendly free plan up to 1,000 mails per month. 9/12/2023Verified on G2 ZK Zunaid K. Director 5/5 ### "Essential tool for email delivery" This tool helps us to implement DMARC reporting for our domains in an easy to use manner. 8/8/2024Verified on G2 [Read all 469 reviews on G2 →](https://www.g2.com/products/dmarc-report/reviews) ```json {"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"470","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DMARC Report","url":"https://dmarcreport.com","description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","publisher":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json [{"@context":"https://schema.org","@type":"FAQPage","mainEntity":[{"@type":"Question","name":"What is an SPF record generator?","acceptedAnswer":{"@type":"Answer","text":"An SPF record generator builds a valid SPF TXT record string by letting you select your email providers and enter custom IP addresses. It outputs the correct syntax (starting with v=spf1, listing mechanisms, ending with a qualifier) so you can copy it directly into your DNS configuration."}},{"@type":"Question","name":"Is this SPF generator free?","acceptedAnswer":{"@type":"Answer","text":"Yes - completely free, no signup required. The generator builds the record client-side in your browser. Nothing is sent to any server."}},{"@type":"Question","name":"How do I know which include to use for my email provider?","acceptedAnswer":{"@type":"Answer","text":"Each email provider publishes a specific include mechanism. Common ones: Google Workspace uses include:_spf.google.com (4 lookups), Microsoft 365 uses include:spf.protection.outlook.com (2 lookups), SendGrid uses include:sendgrid.net (5 lookups). This generator handles the lookup automatically when you select a provider."}},{"@type":"Question","name":"What is the difference between -all and ~all?","acceptedAnswer":{"@type":"Answer","text":"-all (hard fail) instructs receiving servers to reject emails from unauthorized senders. ~all (soft fail) instructs them to accept but flag the email. Use ~all during initial testing, then switch to -all once you have confirmed all legitimate senders are in the record."}}]},{"@context":"https://schema.org","@type":"SoftwareApplication","name":"Free SPF Record Generator - Build Your SPF Record in 60 Seconds","applicationCategory":"WebApplication","operatingSystem":"Web","description":"Generate a valid SPF TXT record by selecting your email providers and entering custom IPs. Shows the exact DNS record to publish, with live lookup counting and RFC 7208 compliance checking.","url":"https://dmarcreport.com/tools/spf-record-generator/","offers":{"@type":"Offer","price":"0","priceCurrency":"USD"},"provider":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com"},"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"470","bestRating":"5","worstRating":"1"}}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://dmarcreport.com/"},{"@type":"ListItem","position":2,"name":"Tools","item":"https://dmarcreport.com/tools/"},{"@type":"ListItem","position":3,"name":"SPF Record Generator","item":"https://dmarcreport.com/tools/spf-record-generator/"}]} ```