Free SPF Record Checker
Validate any domain's SPF record in one click.
This SPF checker finds your domain's SPF record and flags the most common problems: a missing record, more than one SPF record (which is invalid), exceeding the 10 DNS-lookup limit, or a permissive +all that lets anyone send as you.
SPF (Sender Policy Framework) lists the servers allowed to send email for your domain. Receiving servers use it to detect forgeries. A broken or missing SPF record hurts deliverability and, together with DKIM, is what DMARC relies on to protect your domain.
Need to keep SPF healthy across many domains? The paid plan watches for SPF changes and lookup-limit breaches on every client domain and alerts you automatically.
Frequently asked questions
- Can I have two SPF records?
- No. A domain must have exactly one SPF record. Multiple v=spf1 records cause SPF to fail — merge them into a single record.
- What is the SPF 10-lookup limit?
- SPF allows a maximum of 10 DNS lookups (from include, a, mx, etc.). Exceeding it causes a permerror and SPF fails. Flatten includes or remove unused senders to stay under the limit.
- Should SPF end in ~all or -all?
- -all (hard fail) is strictest and recommended once you're confident all senders are listed. ~all (soft fail) is a safe interim. Avoid +all, which allows anyone to send as your domain.