Best free SPF record generators

AdminKit is built by Netbase JSC. AdminKit is listed below; the other tools are independent.

Criteria and how we weighted them

This roundup ranks four free SPF record generators against four published criteria, in priority order, using only what each tool’s own page stated when read on 2026-11-08:

1. Handles the 10 DNS-lookup limit — RFC 7208 section 4.6.4 caps SPF evaluation at 10 lookup-causing terms, so a generator that warns you is better than one that stays silent, and one that also offers a way out of an over-limit record is better still.
2. Mechanism coverage — does the page document the common building blocks (ip4, ip6, a, mx, include) and a closing qualifier?
3. Starts from your existing record — most real edits modify a record that is already published, not a blank one.
4. Nothing leaves your browser — documented on the page itself, not assumed.

Where a page did not mention a feature, the table says so with a dash. That is not a claim that the feature is missing, only that the page read did not document it. AdminKit’s SPF record generator ranks second of four: it ties DMARCLY on warning about the limit and on mechanism coverage, but DMARCLY’s page also points to a remedy for over-limit records and AdminKit’s generator only warns. AdminKit then takes the lead over EasyDMARC and MxToolbox because it documents more of criteria 1, 2 and 4, even though it has nothing for criterion 3.

The ranked list, explained

1. DMARCLY — per its own page, read 2026-11-08, titled “Free SPF Record Generator”. It supports “mx”, “a”, “IPv4 addresses”, “IPv6 addresses”, “Hostnames” and “Includes” with a Fail, SoftFail or Neutral policy, and warns “The SPF record exceeds the 10 DNS query limit, which results in deteriorated email deliverability”, pointing to its “Safe SPF feature” as the solution. The page also shows “Free Trial” and “Log In” links, and it does not say whether the generator needs an account or where the record is built; whether the Safe SPF feature is part of the free generator is not stated either.

2. AdminKit — the SPF record generator builds ip4, ip6, a, mx, ptr, include, exists, redirect and the trailing all qualifier, adds up lookup-causing terms live and warns above 10, and builds the record in browser JavaScript with nothing sent to any server. It drops all when you set redirect, since RFC 7208 says a redirect is ignored beside an all, and flags ptr, which the RFC discourages. It ranks behind DMARCLY because it only warns about the limit and cannot start from your live record. See the section below.

3. EasyDMARC — per its own page, read 2026-11-08, this is “EasyDMARC’s SPF record creator”: enter your domain name and choose source values. The page lists Include IPv4, IPv6, A record, MX record, Exists and Redirect options plus None, Fail, SoftFail and Neutral failure policies, and offers an embeddable version of the generator. The page does not mention the 10-lookup limit or state whether the generator is free; it shows a “Start Free Trial” button in its navigation without saying whether the generator needs it.

4. MxToolbox — per its own page, read 2026-11-08, “this tool can help you generate a SPF Record or modify your current SPF Record as well as to check the modified record has the correct syntax”. It takes a domain name or URL and offers a “Pre-fill with record found” option plus a manual edit section, which is the only starting-from-your-live-record feature documented in this roundup. The page read documents nothing else — no mechanism list, lookup limit or cost — because the tool interface loads dynamically, so its low placement reflects thin evidence, not a verdict on the tool.

Best for your specific need

• An over-limit record you need to shrink: DMARCLY, by its own page’s Safe SPF reference, after confirming it is available to you.
• Building a record from scratch without sending anything anywhere: AdminKit.
• Editing the record you already publish: MxToolbox’s pre-fill option.
• A generator you can embed on your own site: EasyDMARC’s embed option.

Where AdminKit is honestly behind

AdminKit’s generator never queries DNS, so it cannot pre-fill from your published record the way MxToolbox’s page describes; you re-enter every sender yourself. It warns when you pass 10 lookups but does not flatten, merge or otherwise rewrite the record, whereas DMARCLY’s page points to a feature for that. It also cannot see what an include or redirect domain itself resolves to, so its count is a floor, not the fully resolved total. For that, use AdminKit’s SPF check once the record is published, and read SPF too many DNS lookups if you are over the limit. For comparing live-DNS checkers rather than generators, see best free SPF and DMARC checkers. The generator sits in AdminKit’s email-authentication cluster.

---

Trademarks belong to their respective owners; AdminKit is not affiliated with MxToolbox, EasyDMARC or DMARCLY.