SPF record checker

SPF lists which servers are allowed to send mail as your domain. Get it wrong and either your own mail lands in spam, or anyone can send mail pretending to be you.

Try:

Free, no signup, no daily limit. We do not store what you check here.

The ten-lookup limit

SPF allows a maximum of ten DNS lookups while evaluating a record. Every include, a, mx, ptr and exists mechanism counts. Exceed it and the whole record returns permerror, which most receivers treat as no SPF at all. It is the commonest way a record that looks fine silently stops working - usually after adding one more marketing tool.

~all versus -all

A tilde is soft fail: "this was probably not us, accept it anyway". A hyphen is hard fail: "reject it". Soft fail is the safe starting point while you find every legitimate sender, but leaving it there permanently means you never actually get the protection.

Questions

Can I have two SPF records?

No. More than one TXT record starting with v=spf1 is invalid and receivers may reject both. Merge them into one.

Does SPF alone stop spoofing?

No. SPF checks the envelope sender, not the From header a human sees. You need DMARC on top.

Related tools

When you need more than a free tool

This page answers what can be determined offline and from public DNS. The API adds live carrier and mailbox verification, a calibrated confidence score, and the full evidence trail behind every verdict.

Credits never expire. Inconclusive verdicts are never billed. Cancel in one call. See pricing or read the docs.