How do I use the SPF Record Generator tool?

The Valid Email Checker SPF Record Generator is a free builder that produces a valid SPF TXT record from a few inputs. You pick your authorized senders, choose a failure policy, and the tool emits the exact record you paste into your DNS provider. Like the rest of the free tools at VEC, there is no signup and no quota.

Step by step

1. Open /spf-record-generator.
2. Enter your apex domain (e.g. example.com).
3. Click one of the mechanism chips — Include, IPv4, IPv6, A Record, MX Record, or Exists — to add an authorized sender. Each click adds a row; fill in the value (the ESP's include domain, or your sending server IP, or similar).
4. Add as many mechanism rows as you need. A typical record has one or two include: entries (for your transactional and marketing ESPs) plus possibly mx if your domain sends from its own MX.
5. Pick the failure policy: Fail (-all) is recommended for production, SoftFail (~all) is fine while you are still verifying coverage.
6. Click Generate. The tool builds the final TXT record and shows it with a copy button.
7. Paste the record into your DNS provider as a TXT record on the apex domain.

What a generated record looks like

v=spf1 include:_spf.google.com include:servers.mcsv.net ip4:198.51.100.5 -all

That example authorizes Google Workspace, Mailchimp, and one specific IPv4 sender, and tells receiving servers to reject any other source claiming to be your domain. The generator handles the formatting — the order of mechanisms, the spacing, the v=spf1 prefix, the trailing policy — so you do not have to remember the syntax.

Verify after you publish

DNS changes take 15 minutes to a few hours to propagate. Once the record is live, plug your domain into the SPF Record Checker and confirm the new record resolves. The checker also flags the failure policy color, so you can confirm -all (or ~all) made it through correctly. If the result panel still shows an old record, give the DNS another half hour and try again.

For DKIM and DMARC, the companion DKIM Record Generator and DMARC Record Generator work the same way. The three records together — SPF, DKIM, DMARC — are the standard authentication trio for any domain that sends email.