DNS Tools SPF Record Checker

SPF Record Checker

Free SPF record checker. Validate your SPF TXT record and check mechanisms, policy qualifier, and lookup count.

MX Checker SPF Checker DKIM Checker DMARC Checker Blacklist Checker DNS Lookup DNS Propagation Reverse DNS What's My IP WHOIS Lookup SSL Checker

Check SPF Record

Enter a domain name to look up its SPF TXT record in real time.

Enter a domain to check its SPF record

SPF records define which mail servers are authorised to send email for your domain. Missing or misconfigured SPF can lead to email delivery failures and spoofing.

Professional Email
Email hosting with SPF set up out of the box.
Every HostBible email plan includes a correctly configured SPF record, DKIM signing, and DMARC policy from day one.
View Email Plans

Frequently Asked Questions

What is an SPF record?
An SPF (Sender Policy Framework) record is a DNS TXT record that lists all the IP addresses and mail servers authorised to send email on behalf of your domain. When a receiving mail server gets a message from your domain, it checks the SPF record to verify the sending IP is on your approved list. A valid SPF record helps prevent email spoofing and improves deliverability.
Can a domain have more than one SPF record?
No. A domain must have exactly one SPF record. Having two or more TXT records that begin with "v=spf1" causes a PermError, and receiving mail servers will treat the SPF check as failed. If you need to authorise multiple sending services, combine them into a single SPF record using the include: mechanism.
What is the SPF 10-lookup limit?
The SPF specification (RFC 7208) limits a domain to 10 DNS lookups when evaluating its SPF record. Mechanisms that trigger a lookup include include:, a, mx, ptr, and exists. If your record exceeds this limit, the evaluation results in a PermError and receiving servers may treat it as a fail. This is a common problem when you include multiple third-party sending services, each of which may itself include further records.
What is the difference between ~all and -all?
The all mechanism at the end of an SPF record controls what happens to mail from senders not listed in your record. ~all (softfail) tells receiving servers the mail is probably not legitimate but to accept it and mark it as suspicious. -all (fail) tells receiving servers to reject mail that does not match. For domains with DMARC in place, -all is recommended as it gives a stronger signal to receiving servers and reduces spoofing risk.