Free tool
SPF Record Checker
Look up a domain's live SPF record, expand every include and see exactly how many of the 10 allowed DNS lookups it uses. Free and instant.
What the spf checker does
An SPF checker reads the v=spf1 TXT record a domain publishes and evaluates it the way a receiving server does. This one expands every include and redirect, counts the DNS lookups against the RFC 7208 limit of 10, flags void lookups, duplicate records, ptr and +all, and tells you exactly what to change. Everything runs in your browser over DNS-over-HTTPS.
How it works
How the SPF Checker works
-
Enter a domain
Type the domain in your From address, or paste an email address or URL.
-
Every include expanded
We follow include and redirect recursively, the way a receiver evaluates SPF, and count each lookup.
-
Clear fixes
Each check passes, warns or fails with the exact change to make in DNS.
Reading your result
What the result means
-
Valid
One record, 10 or fewer lookups, and a ~all or -all ending. Receivers can evaluate it.
-
Warnings
It works today but is close to the lookup limit, uses ptr, ends in ?all or has dead includes.
-
Problems
Missing, duplicated, over 10 lookups or ending in +all. SPF fails or passes everyone. Fix it before your next send.
FAQ
SPF checker FAQ
What is the SPF 10 DNS lookup limit?
RFC 7208 caps the number of DNS lookups an SPF check may trigger at 10. The include, a, mx, ptr and exists mechanisms and the redirect modifier each count, including those inside nested includes. Go over 10 and receivers return permerror, which DMARC treats as an SPF failure.
Should my SPF record end in ~all or -all?
Both are fine once every legitimate sender is listed. -all asks receivers to reject unlisted servers, ~all asks them to treat the mail as suspicious. With DMARC enforced, ~all is the common choice because DMARC decides the outcome. Never use +all.
Can a domain have two SPF records?
No. A domain must publish exactly one TXT record starting with v=spf1. Two records make every SPF evaluation return permerror. Merge the mechanisms from both into a single record.
What is a void lookup?
A DNS lookup that returns no answer or NXDOMAIN, usually an include for a service you no longer use. RFC 7208 recommends failing after 2 void lookups, so remove dead includes even when you are under the 10-lookup limit.
Does SPF stop my mail from bouncing?
SPF helps receivers trust mail from your servers. It does nothing about addresses that do not exist, which cause hard bounces and damage your reputation. Verify your list as well, so authenticated mail goes only to real inboxes.
Keep going
More free email tools
-
Free Email Verifier
Check syntax, domain, MX records and disposable status for any address.
Open tool -
Email Syntax Checker
Validate an address against the RFC 5321 rules our engine uses and catch typos.
Open tool -
Catch-All Checker
See whether a domain accepts mail for every address, and what that means for your list.
Open tool -
Role Email Checker
Flag info@, sales@, support@ and 250+ other shared inbox patterns in bulk.
Open tool -
Disposable Email Checker
See whether an email or domain belongs to a temporary inbox provider.
Open tool -
DKIM Checker
Find a DKIM public key by selector and check its key type and length.
Open tool -
DMARC Checker
Read and grade a domain's DMARC policy, reporting and alignment settings.
Open tool -
Bulk email verification
Verify every mailbox on a list of up to 100,000 addresses in one job.
Clean a list
Authenticated mail, verified recipients
SPF gets your mail trusted. RocketVerifier makes sure it goes to addresses that exist, with 99.5% accuracy.
100 free credits · No card required · Credits never expire