SPF and DMARC record builder

Generate valid SPF and DMARC TXT DNS records for Microsoft 365, Google Workspace, hybrid and mailers.

Domain name

DMARC report email (rua)

Senders to authorize in SPF

Microsoft 365 / Exchange Online (include:spf.protection.outlook.com) Google Workspace (include:_spf.google.com) SendGrid (include:sendgrid.net) Salesforce (include:_spf.salesforce.com) Mailchimp (include:servers.mcsv.net)

Custom IP or CIDR (e.g. on-premise firewall / hybrid senders)

Other include domains (space separated)

SPF enforcement policy

DMARC policy (p=)

Generated SPF TXT Record (Host: @)

Generated DMARC TXT Record (Host: _dmarc)

Runs in your browser. Nothing you type is sent to the server.

About this tool

Sender Policy Framework (SPF) and Domain-based Message Authentication, Reporting and Conformance (DMARC) prevent email spoofing and are required by Microsoft, Google and Yahoo for reliable mail delivery. Use this tool to build clean DNS TXT records for your domain, check DNS lookup counts against the RFC 10-lookup limit, and configure quarantine or rejection policies with aggregate reporting.