Combine provider include domains into one SPF TXT record. Review the result against your providers’ current setup instructions before publishing.
Select common providers or enter exact include domains. The generator deduplicates includes and creates a draft policy; it does not change DNS.
Retrieve the current SPF policy first. Replacing it without retaining required senders can break mail from your applications and other providers.
Google Workspace and Microsoft 365 publish standard include domains. Other services can use account-specific return paths or CNAME records; follow their instructions.
A generated string is a draft. Nested DNS lookups, active sender coverage and message authentication still need checking.
No. Review and merge the legitimate senders into one SPF policy at the applicable DNS name.
No. Copy the draft into your DNS provider only after reviewing the provider instructions and your existing configuration.