SPF record checker, lookup counter and generator

Check an SPF record for errors and see how many of the 10 allowed DNS lookups it uses, including every include.

SPF record generator

Builds one record. A domain may only have one, so merge it with any existing SPF record rather than adding a second.

Services that send as you (include)One per line or comma separated, e.g. _spf.google.com, spf.protection.outlook.comYour own IPv4 addresses or rangese.g. 203.0.113.5, 198.51.100.0/24Your own IPv6 addresses or rangesWhen a server is not listedSoft fail is right while you are still finding senders.

Allow my MX servers (uses a lookup) Allow my domain's A record (uses a lookup)

Type

TXT

Host

@ (the domain itself)

Value

v=spf1 ~all

Each include, mx and a counts toward the limit of 10 DNS lookups. Check the result above after you publish.

Keep your domain on your radar

A one-time check shows today. Pistos DMARC report monitoring is still being built. Create a free account now to hold your place and add your domain when it opens.

Create a free account

Questions

What is the 10 lookup limit?

SPF allows ten DNS-querying terms (include, a, mx, ptr, exists, redirect) per check, counted through every nested include. Over that, receivers return a permanent error and SPF fails.

Can I have two SPF records?

No. Publish exactly one and merge your senders into it.

~all or -all?

~all (soft fail) is fine while you find senders. With DMARC enforced, both are treated as a failure by receivers that apply DMARC.