What is an SPF record?

A DNS TXT record that lists which mail servers may send for your domain. Receivers use it to spot spoofed From addresses.

How do I create an SPF record?

List every sender, build one v=spf1 string, and publish it as a TXT on the domain apex. This generator writes that string for you.

What SPF record should I use for Microsoft 365?

Include include:spf.protection.outlook.com and end with ~all or -all. Example: v=spf1 include:spf.protection.outlook.com -all.

Can a domain have multiple SPF records?

No. Multiple v=spf1 records fail evaluation. Merge every include and IP into a single record.

How do I check if my SPF record is valid?

Look up the domain TXT records with our DNS tool and confirm there is exactly one v=spf1. Then send a test message to a receiver that shows Authentication-Results.

What is SPF Record Generator?

A free online builder for a single SPF TXT record, including Microsoft 365 and common email platforms.

How does the SPF Record Generator work?

It concatenates the senders you select, counts lookup-heavy mechanisms, and warns you about +all, ?all, and duplicate records.

How do I use the SPF Record Generator?

Enter the domain, tick senders, copy the TXT value, and publish it once on the apex.

Is this SPF Record Generator free to use?

Yes. It is free with no sign-up.

Can I use the SPF Record Generator on mobile?

Yes. Mobile browsers are supported.

All free tools

Free tool

Microsoft 365

SPF Record Generator

Build a single SPF TXT record for Microsoft 365, Google, and other senders. Copy it, publish it, and keep only one v=spf1 on the domain.

Runs in your browser — your data stays on your device

Free tool

Domain

Sending IPv4 (optional, comma-separated)

Sending IPv6 (optional)

Extra include hostnames (optional)

Authorised senders

Allow the domain MX hosts to send (mx)Allow the domain A/AAAA addresses to send (a)

Policy for everyone else

Host / name: contoso.com
Type: TXT
Estimated DNS lookups: 1

TXT value

v=spf1 include:spf.protection.outlook.com ~all

Open your DNS host and create a TXT record on contoso.com (or @).
Paste this value: v=spf1 include:spf.protection.outlook.com ~all
Wait for DNS to propagate, then confirm with the MX / DNS lookup tools on this site.
Keep one SPF record only. Merge new senders into this string instead of adding a second v=spf1.
Publish exactly one SPF TXT record on the domain apex. Multiple SPF records fail validation.

SPF tells receiving servers which hosts may send mail for your domain. The mistake we still clean up on Microsoft 365 tenants is two SPF records: one for Exchange Online and one a marketing tool added later. Receivers treat that as a permanent failure. This free SPF record generator builds one v=spf1 string, includes spf.protection.outlook.com when you tick Microsoft 365, estimates DNS lookups, and reminds you to publish a single TXT on the apex. Use it for Exchange Online, small-business email, and domain owners who are about to add a third-party sender.

How to use the SPF Record Generator

1
Enter the domain and tick every service that sends as that domain, starting with Microsoft 365 if you use Exchange Online.
2
Add any on-premises IPv4 or IPv6 senders, then choose ~all while you monitor or -all when the list is complete.
3
Copy the TXT value onto the domain apex and confirm with a DNS lookup. Do not create a second v=spf1 record.

Why one SPF record beats a pile of TXT records

SPF is a single policy. Each include, a, mx, ptr, exists, and redirect counts toward a hard limit of ten DNS lookups. Marketing platforms love to hand you 'just add this record', which silently breaks Microsoft 365 mail if you add it as a second SPF. Email administrators merge the include into the existing string. That is the habit this generator enforces.

SPF record generator with examples

For contoso.com with Microsoft 365 selected and ~all, you get v=spf1 include:spf.protection.outlook.com ~all. Publish that as a TXT on contoso.com. If you later add SendGrid, tick SendGrid so the string becomes one record with both includes, not two SPF records.

Guides and next steps

Privacy note

Generation runs in your browser. We do not query or store your DNS.

Frequently asked questions

Explore more

Related free tools

More Microsoft 365 license and email authentication tools for tenant planning.

View all tools

Microsoft 365

DMARC Record Generator

Free online DMARC record generator for Microsoft 365 and business email. Build a _dmarc TXT record, start with p=none, and copy it to DNS.

Open tool

DNS & lookup

MX Record Lookup

Free online MX record lookup for Microsoft 365 and IT admins. See mail exchanger priorities, hostnames, and IPv4 examples for any public domain.

Open tool

DNS & lookup

DNS Lookup

Free online DNS lookup for CCNA students and network engineers. Check A, AAAA, MX, TXT, NS, CNAME, SOA, and CAA records for any public domain in seconds.

Open tool

Microsoft 365

M365 License Calculator

Free online Microsoft 365 license calculator for admins and small businesses. Estimate monthly cost and compare Business, Exchange, and E3/E5 plans.

Open tool

DNS & lookup

SSL Certificate Checker

Free SSL certificate checker for website owners and cybersecurity students. Inspect issuer, SANs, validity dates, and fingerprints for any public HTTPS host.

Open tool

Security

Security Headers Checker

Free HTTP security headers checker for website owners and cybersecurity students. Score HSTS, CSP, X-Frame-Options, and other hardening headers on any public site.

Open tool

View all free tools

Ready to go beyond free tools?

Live mentor-led courses turn calculator practice into real networking and IT skill.

View recommended course All courses