SPF Record Checker
SPF (Sender Policy Framework, RFC 7208) tells receiving mail servers which IPs are allowed to send mail for your domain. A misconfigured SPF record lets attackers spoof your brand. This tool fetches your TXT records, validates the SPF syntax, counts DNS lookups (10 max per the spec), and flags weak policies like +all or missing -all.
Frequently asked questions
What is an SPF record?
A TXT DNS record starting with v=spf1 that lists which servers (IPs, hostnames, includes) are authorized to send email from your domain.
Why does the SPF lookup limit matter?
RFC 7208 §4.6.4 caps SPF at 10 DNS lookups during evaluation. Going over invalidates the record and breaks DMARC alignment. Use SPF flattening to stay under.
Should I use -all or ~all?
-all (hard fail) is strongest — receivers reject unauthorised mail. ~all (soft fail) sends it to spam. Start at ~all, monitor with DMARC, then move to -all once stable.