SPF Record Generator & Checker
Build a valid SPF record from scratch, or check your existing one. SPF declares which servers are authorised to send email on behalf of your domain. The DNS check uses Cloudflare's public DNS-over-HTTPS: nothing stored.
Email Deliverability Intelligence
No SPF record = your emails look spoofable, and inbox providers deprioritise them.
SPF is one of three deliverability signals (with DKIM and DMARC). The common mistakes: having no SPF at all, publishing two SPF records (invalid: spec allows only one), or including so many services that you exceed the 10 DNS lookup limit (then SPF fails even if the sender is listed).
Check existing SPF
Build a new SPF record
Authorised sending sources
Generated SPF record
Validation
How to deploy
- Log into your DNS provider (Cloudflare, Route 53, GoDaddy, etc.).
- Add a TXT record on the apex domain (e.g.
yoursite.com, notwww). - Paste the generated record exactly as shown.
- Delete any existing SPF records. only one SPF record per domain is allowed.
- Wait 1–24 hours for propagation, then check again above.
Next steps
SPF is one of three deliverability records: set up all three
DMARC enforces what to do when SPF or DKIM fails. DKIM provides cryptographic signing. All three together give you a proper deliverability baseline.
Frequently asked questions
What is SPF?
Sender Policy Framework. A DNS TXT record listing which servers are authorised to send email from your domain. Prevents spoofing.
What does an SPF record look like?
v=spf1 include:_spf.google.com include:mailgun.org -all. Starts with v=spf1, lists mechanisms, ends with the policy (-all = reject unauthorised).How many lookups can one SPF record have?
10 maximum including nested includes. Over 10 and SPF breaks silently.
What is the "too many lookups" error?
Exceeding the 10-lookup limit. Common with multi-ESP sends (Gmail + Mailchimp + SendGrid + ...). Flatten the record or consolidate senders.
What is -all vs ~all vs +all?
-all hard fail: reject. ~all soft fail: accept but flag. +all pass everything (never use). ?all neutral.How does SPF relate to DMARC?
DMARC uses SPF (and DKIM) results to decide how to handle unauthenticated email. SPF alone doesn't trigger quarantine or reject.
Can I have more than one SPF record?
No. Only one SPF record per domain. Multiple records cause silent failure. Merge into one.
What about SPF for subdomains?
Each subdomain needs its own record (unless using
exists: or include: from the apex).How to check my SPF?
DNS lookup for the TXT record. The tool's checker also simulates how resolvers interpret it.
Does Gmail enforce SPF?
Yes, especially since Feb 2024 bulk-sender requirements. Senders over 5k messages/day to Gmail must have passing SPF + DKIM + DMARC.
What is SPF flattening?
Replacing include: mechanisms with the actual IP addresses to stay under the 10-lookup limit. Trade-off: breaks when ESPs change their IPs.
Free · no account
SEORCE for Chrome, Edge and Firefox
Audits the page you are on: headings, meta tags, schema, indexability, and whether AI crawlers can read it. Export the result as a PDF. Free, with no account.
It audits one page at a time and does not track AI answers. About the extension
Traffic from search and AI
See which visits came from search and AI.
SEORCE Web Analytics runs from one script tag, with Google Search Console connected. It shows visits from every AI source, from search and from campaigns, and it is free on every plan.
3,000+ users · Free forever plan, no card needed