How to use SPF policy analyser
Parse a pasted SPF policy, identify qualifiers and count direct DNS-using terms. The check runs when you submit the form. Its inputs are processed in this browser.
How the check works
The analyser splits one SPF TXT value into mechanisms, qualifiers and modifiers. It identifies permissive all policies, repeated redirect modifiers and unfamiliar terms.
The Overview tab explains the findings. Measured data lets you search individual fields and values, while JSON report shows the complete export. Export JSON to retain a baseline, or print the findings for your own records. Review the report before sharing it: browser characteristics, token claims, and file names can reveal information about your setup.
Read the result in context
The direct DNS-term count covers include, a, mx, ptr, exists and redirect in this record. An included policy can add more lookups, so the count is not the full recursive SPF cost.
Understand the limits
No DNS resolution or SPF evaluation for a sender is performed. Macros and recursive expansion need a full standards-based SPF evaluator.
Common questions
Where is the input processed?
In this browser tab. This tool does not submit its input to the site server or a third-party service.
What should I keep with a result?
Record the selected options, browser and time. Review exported values before sharing them. Generated passwords, tokens and HMAC secret keys are excluded from report exports.