What goes into an SPF record?

An SPF record lists every server allowed to send email as your domain. It starts with v=spf1, names each sender with an include (or ip4/ip6) mechanism, and ends with an all mechanism — -all to reject everything else, ~all to merely flag it. A domain may publish only one SPF record, so every sender must be merged into the same line.

Do I have to add services like Mailchimp to my SPF record?

Yes. SPF only authorizes the servers you list, so any third-party service that sends from your domain — Mailchimp, a CRM, a help desk, an invoicing tool — must be added with its published include, or its mail fails SPF and a strict -all policy gets it rejected. Each include also counts toward the 10-DNS-lookup limit.

Email authentication

Build your record, one answer at a time.

Tell us who sends email for your domain and we'll assemble a correct, single SPF record — with a DNS-lookup check and a plain-English reading of every part. No account, nothing stored.

Question 01 / 06

Your domain

What domain do you send email from?

Optional — it just personalises the guidance. Nothing is sent anywhere; this runs entirely in your browser.