Free tool
Free SPF Record Checker
Look up a domain's SPF TXT record, parse its mechanisms and flag common issues.
About this tool
A free SPF checker for domain owners and email admins. Enter your domain — we fetch its TXT records, isolate the v=spf1 record, parse each mechanism and highlight the common failure modes: no SPF record, multiple SPF records (invalid), missing ~all/-all terminator and exceeding the 10-DNS-lookup limit that causes PermError.
How to use the Free SPF Record Checker
- Enter the domain you want to check.
- We fetch its TXT records via DNS-over-HTTPS.
- The v=spf1 record is parsed into mechanisms and a policy.
- Warnings appear for multiple SPF records, missing terminators and >10 DNS lookups.
Frequently asked questions
- What's the 10 DNS lookup limit?
- RFC 7208 requires SPF evaluators to fail with PermError if evaluating your record takes more than 10 DNS lookups. include:, a, mx, ptr, exists and redirect each cost a lookup.
- Why is having two SPF records a problem?
- SPF specifies exactly one v=spf1 record per domain. When two exist, receivers must treat the check as PermError, which typically means unauthenticated.
- What should my SPF policy be?
- ~all (softfail) is the safe default when you set up SPF. Once you're confident every legitimate sender is listed, move to -all (hardfail).
- Does this checker send test emails?
- No — it only reads your public DNS record. No email is sent.