Can They Email As Me?

These build a starting TXT record from what you tell them — they don't check your domain, send anything, or save what you enter. Review the result against SPF and DMARC before publishing, and re-run a free check afterwards to confirm it's live and correctly formed.

SPF record generator

Tick every service that sends email for this domain — marketing tools, CRMs, invoicing platforms, your website's contact form, not just your main mailbox provider.

Google Workspace Microsoft 365 Mailjet Mailchimp SendGrid Zoho Mail

Anything else (space-separated, e.g. include:_spf.example.com ip4:203.0.113.0/24)

If a server isn't in this list, receivers should: Soft-fail (~all) — safer while you're still testing Hard-fail (-all) — once you're confident the list is complete

Publish this as a TXT record at your domain's apex (host @ or the bare domain):

v=spf1 ~all

SPF allows at most 10 DNS lookups (each include: counts). This record is close to or over that — consider removing unused providers.

DMARC record generator

Policy Monitor only (p=none) — start here Quarantine (p=quarantine) Reject (p=reject)

Aggregate report address (rua) — where summary reports get sent Forensic report address (ruf) — optional, per-message failure reports Percentage enforced (pct)

Publish this as a TXT record at _dmarc.yourdomain.com:

v=DMARC1; p=none

Record generators

SPF record generator

DMARC record generator