SPF Record Generator

Build an SPF record from an IP range, an include entry and an ending policy.

Runs in your browser. Nothing is uploaded — your input is processed on this device and discarded when you close the tab.

Domain

IP range, for example 192.0.2.0/24 (optional)

Include entry without the prefix (optional)

Ending policy: -all, ~all, ?all or +all

How to use this tool

Enter your values in the fields above.
Press Generate to see the result.
Use Load sample to try the worked example, Copy result to copy it, or Clear to start again.

Domain example.com with ip4 192.0.2.0/24, include _spf.example.com and -all gives the full record shown in the result.

This only formats the record you describe. It does not publish it, and it does not check the record currently published for a domain.

Does this publish my record?

No. Copy the result and add it as a TXT record where your domain DNS is managed.

What does -all mean?

It tells receivers that senders not listed in the record are not authorised for your domain.

Format, validate, minify, query and compare JSON in your browser, with precise line-and-column errors.

Live

Test patterns against sample text with match highlighting, capture groups and a safe one-second timeout.

Live

Check HSTS, CSP and other security headers, TLS details, and DNS/email authentication records (SPF, DKIM, DMARC).

Live