Sign inMonitor a domain

Build one SPF record that covers everything that sends as you.

Pick your services and servers. The record updates as you go, and we expand it live so you see the real lookup count, nested includes and all, before it goes into DNS.

Your own servers
Services that send as you
Not listed? Add its include below, exactly as its setup page shows it.
Mail from anywhere else
~all is the usual choice with DMARC; -all once you are sure every sender is listed. +all is never offered: it authorises every server.
Your record
v=spf1 mx ~all

1 lookup before counting nested includes.

Fix 1 of 1 · about 3 minutes

Publish this SPF record

Replace any existing v=spf1 record on this name: a domain must have exactly one.

Your DNS host: choose it below
TypeTXT
Name / Host@
Value / Content / Datav=spf1 mx ~all
TTLYour host’s default (1 hour is typical)
  1. Sign in where your domain’s nameservers point (your DNS host is often, but not always, your registrar).
  2. Open the DNS records or zone editor.
  3. Add a new TXT record. Enter @ as the name; if the host doesn’t add your domain automatically, enter yourdomain.com.
  4. Paste the value exactly, with no surrounding quotes unless the form asks for them, and save.
  5. Most hosts publish within minutes; resolvers that already cached the old answer keep it until its TTL runs out. Then press Re-check.

Steps checked against RFC 1035 §3.3.14 (TXT records) on 5 Oct 2026.

Sources

  1. RFC 7208 §4.6.4: DNS lookup limits · checked 5 Oct 2026
  2. Google Workspace Admin Help: Set up SPF · checked 5 Oct 2026
  3. Microsoft Learn: Set up SPF for custom cloud domains · checked 5 Oct 2026
  4. Zoho Mail: SPF configuration · checked 5 Oct 2026
  5. GoDaddy: Add an SPF record · checked 5 Oct 2026
  6. Proton: Anti-spoofing for a custom domain · checked 5 Oct 2026
  7. Fastmail: Manual DNS configuration · checked 5 Oct 2026

Related tools

Domain Health Report Everything at once, graded, with the fixSPF checker Include tree and the 10-lookup limitDMARC checker RFC 9989 tree walk and policyDKIM checker Common selectors or yoursMTA-STS and TLS-RPT Policy file and reportsDMARC report reader Parsed in your browserDNS lookup Any record, with TTLs explainedWHOIS / RDAP Registrar, expiry, status codes