SPF/DMARC generator
Pick who sends mail for your domain and get the correct TXT records to paste into your DNS. Everything runs in your browser.
1 · Domain and servers
Extra IPs or hosts (one per line): e.g. 203.0.113.10, 2001:db8::1, smtp.example.com
2 · Services sending on your behalf
Other includes (one per line): e.g. include:_spf.provider.com
3 · Strictness and DMARC
Records to add to your DNS (TXT type)
DKIM: your mail provider generates the key (selector + TXT record). After adding the records, verify with Mail Check.
Frequently asked questions
What is SPF?
A TXT record listing the servers authorized to send mail for your domain. Receivers use it to detect forged senders.
What is DMARC and which policy should I choose?
DMARC tells receivers what to do when SPF/DKIM fail. Start with p=none to monitor, then move to quarantine and finally reject once all legitimate traffic is aligned.
Why the 10-lookup limit?
The SPF standard allows at most 10 DNS lookups (include, a, mx): beyond that the record is invalid (permerror) and the protection is lost. The generator counts them for you.