Sign in Check my email
Email authentication

SPF Record Checker

Look up any domain's SPF record, count its DNS lookups against the hard limit of ten, and see exactly which servers are allowed to send as it.

Free, and no account needed. We read public DNS only.
About this tool. SPF is a DNS record listing every service allowed to send email as your domain. Broken or duplicate SPF gets your mail junked. This check validates the record, counts the 10-lookup limit that silently breaks SPF, and names the senders it recognizes.

Ten signals decide whether your mail arrives. You just checked one.

SPF names who may send as you. It cannot say whether the message was altered on the way, and it cannot tell a receiver what to do when the check fails, which is what DKIM and DMARC are for.

Run the full checkup free
No card, and nothing to cancel.

How to read your SPF record

Common problems and how to fix them

SPF passes some places and fails others
You likely exceed the 10-lookup limit or have two SPF records. Flatten includes you do not need and merge into one record.
A vendor's mail is being rejected
Add that vendor's include or IP to your single SPF record. Do not create a second SPF record.
MX LookupDKIM CheckDMARC CheckBlacklist CheckSPF GeneratorFull email checkup
Common questions.
What is an SPF record?

A DNS TXT record that lists which mail servers are authorized to send email using your domain.

What is the SPF 10-lookup limit?

SPF may trigger at most 10 DNS lookups while evaluating. Exceeding it causes a permerror and SPF fails, so keep includes lean.

Should I use -all or ~all?

-all (hard fail) is stronger and preferred once you are confident every legitimate sender is listed. ~all (soft fail) is a safer starting point while you verify.