Free SPF Record Check, SPF Record Generation, SPF Record Validation,

Check, Generate and Validate
your SPF Record Online

Free SPF record checker tools

SPF Record Check and
Lookup tool

Use SPF Record Lookup, if you want to:

Check SPF TXT record published in DNS for the domain
Check if SPF record's elements and syntax correspond to SPF' specification (RFC7208)
Check published SPF record's tree hierarchy of DNS lookups
Check all IPs and IP ranges included in SPF
Check for the presence of multiple SPF records in DNS, which do lead to SPF record’s “permerror” according to SPF’s specification
Check SPF record's length for not exceeding 450 octets, which may lead to SPF record validation error (RFC7208, div 3.4)
Check SPF record for recursive include which causes "permerror"
Check SPF record for not exceeding "2 Void DNS Lookups", which do lead to SPF record validation error (RFC7208, div 4.6.4)

SPF Record Generator tool

SPF Generator

Create SPF TXT record and publish it in DNS
Read about all SPF’s mechanisms and terms to easily configure SPF Record
Validate SPF record’s text corresponds to specification before publishing it in DNS

SPF Record Raw Checker tool

Use SPF Record Raw Checker, if you want to:

Validate your SPF TXT record before publishing it in DNS
Check SPF record’s text corresponds to specification
View SPF record’s tree hierarchy with validations
View all nested IPs and IP ranges included in SPF’s tree hierarchy
Check existence of multiple SPF records, which is error described in SPF’s specification
Check against SPF Record's "10 DNS Lookup" limitation, which is serious error described in SPF's specification
Check SPF record against recursive include which causes "permerror"
Check SPF record against "2 Void DNS Lookups" limitation, which do lead to "permerror" validation error according to specification (RFC7208, div 4.6.4)

Frequently Asked Questions

What is SPF?

Sender Policy Framework (SPF) is an authenticated protocol implemented in Domain Name System (DNS). It specifies the IP addresses or hostnames authorized to send emails from the organizational domain. There are 2 main reasons that make SPF a must-have:

• SPF is a technology used to verify and authenticate email domains and prevent hackers from sending emails on your behalf. SPF was created to supplement the Simple Mail Sending Protocol (SMTP), as the latter doesn't have any authentication processes. SPF is a technical email authentication process that protects senders and receivers against spoofing and phishing. The policy establishes a set of rules that the receiving email domains must follow to verify that incoming emails are sent from an authorized host within that domain's administration.

• SPF increases email deliverability (inbox placement) by increasing the trust of Email Service Providers. As a result, the probability of your message ending up in the Inbox instead of Spambox increases. SPF is a major factor, but it doesn't solve all your email delivery problems. It's an additional layer that, combined with standards like DKIM and DMARC, can improve your inbox placement rates by 40% or even more. SPF Authentication Result should be returned back to the sending Mail Transfer Agent (MTA) with various results depending on multiple factors. Major Mailbox Providers usually report one of the following verification results:

None: No SPF record found for the sending domain.

Neutral: The domain owner has explicitly stated that they don't want to assert whether the IP address is authorized or not. This is achieved by using the ? qualifier (?all). This is also interpreted as “None”.

Pass: The IP address is authorized to send from the domain and is present in the sender domain's SPF Record.

Fail: The IP address isn't authorized to send from the domain and isn't present in the SPF Record of the sender domain. This is achieved by using - qualifier (-all).

SoftFail: The IP address may or may not be authorized to send from the domain. This is achieved by using ~ qualifier (~all).

TempError: A temporary error occurred during the SPF verification process. This is mainly due to technical issues from the receiver side.

PermError: The published SPF record could not be verified by the receiver's mailbox provider. These are caused by multiple cases, including a syntax or format error in the SPF record, exceeding 10 DNS Lookup limitations, or having multiple void lookups.

What is SPF record raw checker?

SPF record raw checker allows you to validate your SPF TXT record before publishing it in DNS. Email deliverability and domain protection will improve once you have a properly set up SPF record. The SPF record is considered correctly configured when the SPF record checker finds the SPF record, the record does not exceed the maximum of 10 lookups and the configured IP addresses are the real ones that are sent emails from.

What happens if there is "No SPF Record Found"?

What is SPF Record syntax?

SPF Record is in TXT format. It lists the IP addresses from which you can send emails on behalf of the example.com domain. Other IP addresses will not pass the SPF check. Also, an SPF Record for one domain can include a link to a Record in another domain. To do this, add the include: modifier to the body of the Record. When reading the sending domain's SPF Record, a request is made to the domain record specified in the include modifier. An example of an SPF TXT Record for the example.com domain with the include modifier: v=spf1 include:_spf.google.com ~all The includes: directive includes SPF Record for the domain _spf.google.com, which includes all the Google IP Addresses used for the outgoing mail stream. So, this way Google can add and remove mail servers without you (domain admin) having to change SPF Record whenever Google updates their settings.

I have published my SPF records, what's Next?

How to set up an SPF Record?

First, you need to determine which IP addresses will be sent on behalf of your domain. This includes: Other servers used to send emails on your domain behalf, Third-Party providers used for your various email strategies (Marketing, Transactional, etc) and your websites use a service that generates automatic emails, for e.g "Contact Us" form. If you do not provide for all options, then communication with subscribers or colleagues may be disrupted. Next, create an SPF Record according to the protocol syntax, use our free SPF Record generator. After generating an SPF Record, register it in the TXT Record of the domain. In fact, you need to add a new TXT Record in your given DNS Provider (GoDaddy, Cloudflare, etc.)

How do I correct a failed SPF record message?

You can reduce the number of DNS lookup errors you come across by replacing the elements in your configurations that are causing the DNS lookups. This includes "a," "ptr," "redirect," "include," and "exists". You can replace these items with elements that do not cause lookup problems, such as "ip6" and "ip4". This process is known as SPF flattening. Here are some problems with SPF flattening to be aware of:
Verizon Media (Yahoo) will display your BIMI logo if :

Reports that are included in your DNS can be changed over time, especially if you use multiple email service providers
SPF texts do not have infinite lengths. If a flattened SPF record has more than 450 characters, the record must be split up and managed separately
SPF flattening can exceed 10 DNS lookup limitation but needs to include SPF macroses instead of simple IP ranges in the DNS

Do I need an SPF record?

Start your 14-day trial to get full visibility of your email infrastructure and identification of your email weak points and how to improve and level up from there

Simplify YourDMARC Experience

All-In-One Email Deliverability Platform

Mastering Email Protection and Implementation:

Check, Generate and Validateyour SPF Record Online