SPF record checker and validator
Look up a domain's SPF record, expand every include, count DNS lookups against the limit of 10, and see exactly what to change.
Free, instant, no signup. Results include SPF, DKIM and DMARC together.
What this SPF check does
SPF (Sender Policy Framework, RFC 7208) is a TXT record listing the servers allowed to send mail for a domain. Receivers evaluate it on every message. The checker fetches the record, recursively resolves each include: and redirect=, and counts the mechanisms that require DNS queries (include, a, mx, ptr, exists, redirect). More than 10 is a permanent error and SPF fails for all your mail.
Common SPF problems it detects
- No record, or more than one record (both mean SPF fails)
- More than 10 DNS lookups, or more than 2 void lookups
+all(anyone can send as you) and?all(no signal)- Includes pointing at domains with no SPF record
- Deprecated
ptrmechanism and terms afterall
Ways out of a bad result
Remove what you stopped using. Most records over the limit include a tool that was cancelled years ago.
Flatten the noisy ones. Swap a heavy include for its IP ranges, and monitor them.
Use subdomains. Send marketing from a subdomain with its own SPF and stop crowding the root.
Monitoring re-counts this every day, so the next include someone adds does not sneak past 10.
Recently graded
Public checks from the last few days. Every report is re-measured from DNS when opened.