SPF Record Checker

Fetch the SPF record a domain publishes, read it in plain language, and see how close it is to the ten-lookup limit that quietly breaks so many setups.

How to use

1. Enter the domain that appears after the @ in your From address.
2. Press Check SPF. The record is fetched, then each include is followed so nested lookups are counted too.
3. Fix anything the report marks as an error before you tighten your DMARC policy.

Frequently asked questions

What breaks when I exceed ten lookups?

Receivers must return a permanent error, which usually means SPF is treated as failed for every message. Replace chatty includes with explicit ip4 ranges, or drop vendors you no longer use.

Why does the tool warn about two records?

A domain must publish exactly one SPF record. Two TXT records starting v=spf1 make the whole check invalid, even if both are individually correct.

Does a passing SPF record mean my mail is authenticated?

Only partly. DMARC also needs the SPF domain to align with the visible From domain, and DKIM signing is the more resilient half of the pair.