Free tool
SPF & DMARC generator
Tick the services that send email on your behalf, choose how strict you want to be, and copy the two records into your DNS. Everything happens in your browser.
SPF
Who sends email with your address? Your mailbox provider, newsletter tool, invoicing software, website forms…
IP addresses (ip4:, ip6:) or includes given by a service not in the list, separated by spaces.
Mailchimp doesn't need to be in SPF: authenticate your domain in its settings instead (DKIM).
DMARC
What receiving servers should do with a message that claims to be from you but fails, and where to send you reports.
A dedicated mailbox: reports arrive daily as XML files. Leave empty to receive none.
Once published (allow a few minutes to a few hours), check them with the SPF, DKIM & DMARC checker.
Before you publish
- Keep a single SPF record. If your DNS already has a TXT record starting with
v=spf1, replace it rather than adding a second one: two SPF records cancel each other out. - Don't forget anything. Your website's contact form, the ticketing or membership tool, the accounting software: anything that sends “From: …@your-domain” must be in the list, or its messages will fail.
- Start DMARC at
none. Read the reports for two to four weeks, fix what fails, then move toquarantineandreject. - DKIM is set up separately, at each service: it gives you its own records to add. This generator doesn't cover it.
