SPF Checker
Check a domain's SPF record, find missing or duplicate records, estimate DNS lookup usage, and see whether the ending policy is safe for bulk sending.
Start Here
Enter a domain and run SPF Checker.
Review the SPF Checker Result
Review the status, warnings, and recommended actions shown in the result panel.
Ready When You Are
Run SPF Checker to see the SPF Checker result and next actions.
About SPF Checker
SPF is a DNS record that tells receiving mail servers which systems are allowed to send mail for a domain used during delivery. It is usually checked against the return-path domain, which may be different from the visible From address. The SPF checker explains whether the public SPF record exists, whether it is duplicated, and whether the policy is too open. Read SPF for the full setup background.
A passing SPF record does not automatically mean DMARC will pass. DMARC also cares whether the SPF domain aligns with the visible From domain, and many senders rely on DKIM alignment instead. The SPF checker calls out lookup-limit and ending-policy problems because those are common reasons SPF fails even when the record looks reasonable. Use DMARC Alignment when you need to understand how SPF, DKIM, and the From domain work together.
What SPF Checker Checks
- SPF TXT record lookup
- Missing or duplicate SPF records
- Unsafe +all, neutral ?all, or missing all policy
- Include and redirect mechanisms
- Approximate SPF DNS lookup count
- Plain-English SPF fix steps
Questions
Why does the SPF checker mention DNS lookups?
SPF records allow only a limited number of DNS lookups. Too many include, a, mx, exists, ptr, or redirect mechanisms can make SPF fail even when the record looks correct.
Can SPF alone make DMARC pass?
SPF can help DMARC only when SPF passes for a domain aligned with the visible From domain. Most senders should also configure DKIM.