Skip to content
VENOVIQ

Explore VENOVIQ

Book a call
Pakistan · Working worldwideali@venoviq.com ↗

Free tool · Land in the inbox

Write your SPF and DMARC records in 2 minutes.

Tick the services that send your email. We write the exact records, check them for mistakes and show you where to paste them. Free, no sign up.

  • 100% free
  • No sign-up
  • No daily limit
  • Made in your browser

Optional. We read your public DNS records to fill in the form.

SPF is a list of the services allowed to send email from your domain. Email from anywhere else looks fake to Gmail and Outlook.

Which services send email for you?

Include everything: your mailbox, your newsletter tool, your CRM, your help desk and your website's contact form.

Mailboxes

Sending tools

Help desk and CRM

Not in the list? Mailchimp newsletters and cold email tools like Instantly or Smartlead send through their own servers or your Google or Microsoft mailbox, so they need nothing here. HubSpot gives each account its own include: add it below.

Anything else?
    What should happen to email from anywhere else?

    DMARC tells inbox providers what to do with emails that pretend to be from you. Gmail, Yahoo and Microsoft require it if you send 5,000 or more emails a day.

    What should happen to fake emails?

    Reports are daily summaries from Gmail, Outlook and others. Use a mailbox you read, or a separate one, as they can be many. More than one? Separate them with commas.

    Advanced settings
    100%

    Lets you move up step by step, for example send 25% of fakes to spam first. Only used with Send to spam or Block.

    For addresses like news.yourcompany.com. Most people keep this the same.

    Strict means the sending domain must match exactly, so email sent from mail.yourcompany.com no longer counts as yourcompany.com. Leave both off unless you know you need them.

    Your SPF record

    Ready to copy
    Type
    TXT
    Name
    @
    Value
    TTL
    Auto (or 3600)

    If your DNS panel asks for pieces of 255 characters

    DNS lookupsTick a service to count
      Check it with the Domain health check
      Where do I paste this?

      Add a new TXT record where you bought your domain or where its DNS is managed. Menu names can differ slightly.

      • Cloudflare

        Log in, pick your domain, then DNS > Records > Add record. Type: TXT. Name: the name above. Content: paste the value. Save.

      • GoDaddy

        My Products > your domain > DNS > Add New Record. Type: TXT. Name: the name above. Value: paste the value. Save.

      • Namecheap

        Domain List > Manage > Advanced DNS > Add New Record > TXT Record. Host: the name above. Value: paste the value. Click the green tick.

      • Hostinger

        Domains > your domain > DNS / Nameservers. Type: TXT. Name: the name above. TXT value: paste the value. Add record.

      • Spaceship

        Launchpad > Domain Manager > your domain > Advanced DNS > Add record. Type: TXT. Host: the name above. Value: paste the value. Save.

      Changes usually show within an hour, sometimes up to 48 hours.

      Want us to set it up for you?

      We'll set up SPF, DKIM and DMARC for your domain and check it's working.

      Talk to us

      How it works

      Simple, in 3 steps.

      1. 01

        Tick your services

        Pick everything that sends email for your domain: your mailbox, newsletter tool, CRM and help desk.

      2. 02

        Choose how strict

        Pick what happens to emails that fail. We explain each choice and mark the safe one.

      3. 03

        Copy and paste

        Copy the record into your domain provider, then check it with our free Domain health check.

      The safe path

      From watching to full protection, without blocking your own email.

      Jumping straight to Block can stop your own invoices and newsletters. Move up one step at a time.

      1. Day 1p=none

        Watch only

        Nothing is blocked. Reports start arriving, so you see every service that sends in your name.

      2. After 2 to 4 weeksp=quarantine

        Send to spam

        When reports show only your own services, fakes go to the spam folder. Start at a lower percentage if you like.

      3. When all looks cleanp=reject

        Block

        Fakes are refused before anyone sees them. Full protection for your name.

      SPF

      The list of services allowed to send for you. One record only, with at most 10 lookups.

      DKIM

      A signature that proves an email wasn't changed. Your email provider makes this key for you.

      DMARC

      Ties SPF and DKIM to your name and says what to do with fakes. It needs at least one of them to pass.

      Questions

      Straight answers.

      Do I need both SPF and DMARC?

      Yes. SPF says who can send. DMARC says what to do when a check fails. You also need DKIM, which your email provider turns on for you. The Domain health check shows if it's on.

      Can I have two SPF records?

      No. With two, both fail. Put every service in one record. This tool does that for you.

      Will this change anything by itself?

      No. Nothing changes until you paste the record at your domain provider.

      Which DMARC policy should I start with?

      Watch only. It blocks nothing, so it can't break your email. Move up when your reports show only your own services.

      What does the 10 lookup limit mean?

      Each service in SPF makes the inbox look up more records. After 10, the inbox stops and treats SPF as failed. Remove services you no longer use.

      Do you see or save my domain?

      No. The records are made in your browser. If you click Load my current records, your browser asks Cloudflare's public DNS for your domain's public records. Nothing comes to us.

      Keep going

      More free tools

      See all free tools

      Every slow reply is a chance for someone else to win the client.

      Let's make sure the next one is yours.

      Tell us what you need and we'll send you a clear quote.

      Book a callGet a quote

      ali@venoviq.comWhatsApp +92 346 9297110