SPF Record Checker
Check whether your domain’s SPF record is valid: we parse it, follow every include recursively, count DNS lookups against the RFC 7208 limit, and flag risky qualifiers like +all.
Try: · ·
What is an SPF record?
SPF (Sender Policy Framework) is a DNS TXT record that lists which mail servers are allowed to send email for your domain. Receivers check it to decide whether a message’s sending server is authorized.
A valid SPF record starts with v=spf1, lists mechanisms like include: and ip4:, and ends with an all qualifier that says what to do with everything else.
The 10-lookup limit
SPF allows at most 10 DNS-querying mechanisms (include, a, mx, ptr, exists, redirect) across the whole record, including nested includes. Exceed it and receivers return a “permerror” — your SPF effectively stops working.
This checker resolves your includes recursively and reports the real lookup count so you can flatten or trim before you hit the limit.
Choosing the right “all” qualifier
-all (hard fail) is the strongest and recommended once you trust your sender list. ~all (soft fail) is a safe interim. ?all (neutral) offers no protection, and +all is dangerous — it authorizes anyone to send as your domain.
Frequently asked questions
- Can I have more than one SPF record?
- No. A domain must publish exactly one
v=spf1record; multiple records cause a permerror. Merge them into one. - What is a void lookup?
- A lookup that returns no record (NXDOMAIN/empty). SPF allows at most two; more cause a permerror.
Want better inbox placement?
JaxSuite helps you fix authentication, warm up your domains, and land in the inbox.
