SPF Record Generator
SPF tells mailbox providers which servers are allowed to send email for your domain. Get it right and your newsletters land in the inbox. We'll check your existing setup and build the correct record — without breaking what already works.
- 1 Your domain
- 2 Sending services
- 3 Your record
Step 1 — Your domain
What's the exact domain your email is sent from — the part after the @ in your sending address? We'll look up any SPF record there so we don't overwrite it.
If you send from a subdomain (like mail.mybusiness.com), enter that exact subdomain — the record belongs there, not on your root domain. No https://.
Step 2 — Who sends your email?
We found an existing SPF record
Don't worry — we'll merge your services into this record rather than replacing it.
No SPF record found yet — we'll create one from scratch.
Pick every service that sends email from your domain — you can choose more than one.
Another provider not listed?
Enter the provider's SPF include domain (it's in their setup docs) — for example _spf.google.com or mailgun.org.
Selected services
What is SPF, in plain English?
SPF (Sender Policy Framework) is a single line in your domain's DNS that lists the mail servers allowed to send email on your behalf. When a message arrives, the receiving server checks the sender against this list. If it matches, the mail looks legitimate; if it doesn't, it's far more likely to be filtered or rejected.
For newsletters, SPF is one of the biggest levers on deliverability. Get it wrong — or have two conflicting records — and even genuine emails can land in spam.
Two rules trip people up, so our generator handles both for you: there must be exactly one SPF record per domain (we merge, never duplicate), and an SPF record may trigger at most ten DNS lookups before it breaks (we flag it if you're getting close).
SPF questions
No — a domain may have only one SPF record. Two v=spf1 records cause a permanent error and break SPF entirely. That's why this tool looks up your existing record and merges the new service in, rather than adding a second one.
~all (softfail) says "anything not listed is probably not us" — receivers usually accept it but mark it. -all (hardfail) says "reject anything not listed". We default to ~all while you confirm everything sends correctly; once you're sure, hardening to -all is the gold standard.
Every include, a, mx and redirect in your record triggers a DNS lookup, and the spec allows a maximum of ten. Go over and SPF fails. If your merged record is getting close, we'll warn you so you can consolidate.
Yes — SPF is one of three layers. DKIM signs your mail cryptographically, and DMARC ties SPF and DKIM together and lets you monitor abuse. On Magic Pages DKIM is automatic; for DMARC, use our DMARC generator.
Hosting your Ghost site with us? We'll happily set this up for you.
Ready to Publish? A snap of your fingers – and you're live!
Join 1,400+ publishers who chose Magic Pages as the home for their Ghost site.
Live in 5 minutes
Personal support from our team
All Ghost features included
14-day free trial, no credit card
No credit card required
I personally guarantee you'll love the experience, or I'll help you find a better solution.
— Jannis, Founder of Magic Pages
