SPF Record Generator & Checker
Build the SPF record for your domain, or check an existing one, including the 10 DNS lookup limit.
v=spf1 mx include:_spf.google.com ~all
Keep one SPF record per domain. If you already have one, merge the includes into it instead of adding a second.
Check a domain's SPF record
SPF, DKIM and DMARC: what each one does
- SPF lists the servers allowed to send for your domain.
- DKIM adds a signature to each email; your email service gives you the DKIM record to publish.
- DMARC tells receivers what to do when SPF and DKIM don't line up with your From address, and sends you reports. Since February 2024, Gmail and Yahoo require bulk senders to have DMARC.
Frequently asked questions
What is an SPF record?
SPF (Sender Policy Framework) is a DNS TXT record that lists the servers allowed to send email for your domain. Receiving mail servers check it to spot forged senders, so a correct record helps your email reach the inbox.
Where do I add the SPF record?
In your domain's DNS settings (at your registrar or DNS host), add a TXT record on the root of the domain (often written as @) with the value this tool generates. Keep only one SPF record per domain.
What is the 10 DNS lookup limit?
RFC 7208 limits an SPF check to 10 DNS lookups. Every include, a, mx, ptr, exists and redirect counts, including the ones inside included records. Go over 10 and receivers may treat SPF as failed.
Should I use ~all or -all?
~all (soft fail) marks unlisted senders as suspicious; -all (hard fail) says to reject them. Start with ~all while you confirm every service that sends for you, then consider -all, ideally alongside DMARC.
Is my domain stored?
No. The checker asks a public DNS resolver (Cloudflare, or Google Public DNS as a fallback) directly from your browser. Nothing goes to a GiiS server.
Related free tools
DMARC record generator · Spam word checker · Subject line checker · Email signature generator