spf-record-checker
SPF Record Checker
Validate your SPF record, policy and 10-lookup limit instantly.
Check whether your domain's SPF record is valid and correctly configured. We parse your v=spf1 record, evaluate the all policy, and count DNS lookups against the RFC 7208 limit.
Confirm, Evaluate, Count
We fetch your domain's TXT records and analyze the SPF entry:
Frequently asked questions.
What is the SPF 10-lookup limit?
SPF allows a maximum of 10 DNS lookups. Exceeding it causes a permerror and authentication failures. We count these for you.
Should I use -all or ~all?
-all (hard fail) is the strongest. ~all (soft fail) is a safe intermediate step while you verify all your senders.
Can I have more than one SPF record?
No — having multiple SPF records is invalid and causes authentication to fail entirely. Merge them into a single record instead.
What does the include mechanism do?
It authorizes a third-party service (like Google Workspace or SendGrid) to send mail on your domain's behalf by referencing that provider's own SPF record.
Why does SPF alone not stop spoofing?
SPF only validates the envelope sender, not the visible "From" address — pair it with DMARC to fully protect against spoofed emails.
What happens if I exceed the 10-lookup limit?
Receiving servers return a permerror and typically treat the SPF check as failed, which can hurt deliverability even if your record looks otherwise correct.
Struggling with deliverability?
