MailAuthWatch

SPF record checker and validator

Look up a domain's SPF record, expand every include, count DNS lookups against the limit of 10, and see exactly what to change.

Free, instant, no signup. Results include SPF, DKIM and DMARC together.

What this SPF check does

SPF (Sender Policy Framework, RFC 7208) is a TXT record listing the servers allowed to send mail for a domain. Receivers evaluate it on every message. The checker fetches the record, recursively resolves each include: and redirect=, and counts the mechanisms that require DNS queries (include, a, mx, ptr, exists, redirect). More than 10 is a permanent error and SPF fails for all your mail.

Common SPF problems it detects

  • No record, or more than one record (both mean SPF fails)
  • More than 10 DNS lookups, or more than 2 void lookups
  • +all (anyone can send as you) and ?all (no signal)
  • Includes pointing at domains with no SPF record
  • Deprecated ptr mechanism and terms after all

Get told when it changes

MailAuthWatch re-checks your domains daily and alerts you on any change. From $29/month for 10 domains.

See pricing

Recently graded domains

Public checks run in the last few days. Every report is measured live from DNS when it is opened.