SPF Record Generator
Assemble a syntactically valid SPF record from the providers and IPs that send mail for your domain, and catch the 10-lookup limit before receivers do.
Workflow
Run check
Inspect a live record
Results are generated on demand so you can verify the current public configuration.
What is an SPF record?
SPF (Sender Policy Framework) is a TXT record that lists the servers authorized to send
email for your domain. Receiving servers check it to detect forged senders.
Why does the lookup count matter?
SPF allows a maximum of 10 DNS lookups. Each include and mechanism such as a, mx, or
redirect counts. Going over the limit triggers a PERMERROR, and many receivers then treat
SPF as failing, which hurts deliverability.
What is the SPF 10-lookup limit? +
RFC 7208 caps SPF at 10 DNS lookups. include, a, mx, ptr, exists, and redirect each count as a lookup. Exceeding 10 causes a PERMERROR and SPF is treated as failing.
Should I use -all or ~all? +
Use -all (hard fail) once you are confident every legitimate sender is listed. Use ~all (soft fail) while testing so mail is not rejected during rollout.
Does this publish the record for me? +
No. The generator produces the TXT record string. Add it to your DNS as a TXT record on the root domain yourself.