Add your sending sources, pick a failure policy, and let the wizard assemble a syntactically valid SPF record, so you're not troubleshooting deliverability issues later.
Check, create, or validate your record to stop spoofing and boost deliverability.
Our guided wizard makes it easy to create a new, error-free SPF record to authorize your senders.
SPF Record
SPF syntax is unforgiving — a missing space, a stray character, or the wrong mechanism order can invalidate the entire record without any obvious warning until your emails start bouncing or landing in spam. A generator removes that risk by building the record structurally: you choose your sending sources and failure policy, and the tool assembles a syntactically valid record automatically.
This matters most if you're adding several sending sources at once — say, Google Workspace for internal mail, plus a marketing platform and a CRM — since each one needs to be listed with the correct mechanism and combined into a single record. Domains can only have one published SPF record; the generator above builds that one consolidated record for you.
Every SPF record follows the same three-part structure:
v=spf1 include:_spf.example.com ~allThis must appear first, exactly as written, or receiving servers ignore the entire record....
This must appear first, exactly as written, or receiving servers ignore the entire record....
mechanism at the very end, which decides what happens to mail from anyone not listed above.
Here's a real, working example:
Log in to your DNS provider or domain registrar's control panel.
Find the DNS management section - often labeled "DNS Management," "Zone Editor," or "Advanced DNS."
Create a new TXT record.
Set the host/name field to @ (your root domain), unless your provider instructs otherwise.
Paste your generated SPF record into the value field exactly as shown, with no extra quotation marks unless your provider requires them.
Save the record. DNS changes can take anywhere from a few minutes up to 48 hours to fully propagate.
Run the record back through VitaMail's SPF Checker to confirm it published correctly and is within the DNS lookup limit.
The final all mechanism decides what happens to mail from a source that isn't listed in your record. This one tag has an outsized effect on your deliverability and your exposure to spoofing
A domain can only have one SPF TXT record. If you already have one, replace it - don't add a new one alongside it, or every check will fail with a PermError.
Leaving out a legitimate sender (a support desk, a billing tool, a marketing platform) means its emails will fail SPF the moment you switch to a strict failure policy.
This does the opposite of what most people expect - it authorizes literally any server to send as your domain, removing SPF's protection entirely.
DNS typos are common and easy to miss. Always re-run the published record through a checker after it propagates, rather than assuming it saved correctly.
Write subject lines that encourage opens.
AI Subject Line Generator
Generate full email drafts you can review and edit.
AI Email Generator
If you can`t find what you`re looking for, our team is always ready to assist you.
Join marketers who get fresh strategies, growth ideas, and new feature updates — only the useful stuff, no spam.
