SPF and DMARC record builder

Build the DNS records, understand what each tag actually does, and get them in an order that will not bounce your own invoices. Most domains that fail here fail because somebody published p=reject on a Friday.

Everything you type stays in this tab. Share copies a link, never your inputs, unless the tool says it encodes them in the URL.

SPF

Domain

Sending services

Ctrl-click to select several. Each include costs one of your ten DNS lookups.

Extra IPs or hosts

Policy on everything else

DMARC

Policy

Apply to

Aggregate reports to

Alignment

SPF has a hard limit of ten DNS lookups. Exceed it and the check returns permerror, which most receivers treat as a failure, so a domain can break by adding one more vendor.