SPF Record Checker
Look up and validate a domain's SPF (Sender Policy Framework) TXT record.
SPF records change — and you won't know until deliverability drops.
Monitor your SPF automatically
- ✓Hourly SPF validation
- ✓MX record monitoring
- ✓DKIM / DMARC checks
- ✓Email + Slack alerts
- ✓Change history
- ✓Deliverability score
Frequently Asked Questions
What is an SPF record?
SPF (Sender Policy Framework) is a DNS TXT record that lists which mail servers are allowed to send email for your domain. Receiving servers check it to help detect spoofing. A record looks like v=spf1 include:_spf.google.com ~all.
What do the SPF mechanisms mean?
include:— authorize another domain's SPF (e.g. your email provider).a/mx— authorize the domain's A or MX hosts.ip4:/ip6:— authorize specific IP addresses or ranges.all— matches everything else; the qualifier before it sets the policy.
What is the difference between ~all and -all?
-all (hard fail) tells receivers to reject mail from servers not listed. ~all (soft fail) tells them to accept but mark it suspicious. ?all is neutral. Use -all once you're confident every legitimate sender is included.
Why does SPF allow only 10 DNS lookups?
The SPF spec limits a record to 10 DNS-querying mechanisms (include, a, mx, ptr, exists) to prevent abuse. Exceeding it causes a permerror and SPF fails. If you're over the limit, flatten nested includes or remove unused senders.
Can I have more than one SPF record?
No. A domain must publish exactly one SPF (v=spf1) TXT record. Two or more cause a permerror. Merge all senders into a single record instead.