SPF record checker
Look up a domain's SPF record, see every include, and find out whether it breaks the 10-DNS-lookup limit, the most common reason SPF silently fails.
Works with a domain, an email address or a website URL. Lookups run in your browser over public DNS; nothing is stored.
Checking many domains, or clients' domains?
The Email Deliverability Checker audits SPF, DKIM, DMARC, MTA-STS and BIMI for hundreds or thousands of domains at once, grades each A–F with fixes, and exports to CSV/Excel or an API. Run it on a schedule to catch broken records. $8 per 1,000 domains, no subscription.
Run the bulk checker on ApifyFAQ
What is an SPF record?
A TXT record at the root of your domain, starting with v=spf1, that lists the servers allowed to send email for your domain. Receivers check it to spot spoofed mail.
What is the 10 DNS lookup limit?
SPF may trigger at most 10 DNS lookups (each include, a, mx, exists and redirect, counted through nested includes). Above 10, SPF returns a permanent error and fails for every message. See how to fix too many DNS lookups.
Should SPF end in ~all or -all?
Both are fine when you also have DMARC. -all (fail) is stricter; ~all (softfail) is the common, safe choice. Never use +all, which lets anyone send as you.
Can I have two SPF records?
No. Two v=spf1 records make SPF fail. Merge them into one record with all the includes.
Related free tools: Full SPF/DKIM/DMARC audit · SPF checker · DMARC checker · DKIM checker · MX lookup · Gmail/Yahoo sender rules · SPF generator · DMARC generator