Free tool

SPF Record Checker

Look up a domain’s SPF record, count its DNS lookups against the limit of 10 and find the mistakes that make SPF fail.

SPF (Sender Policy Framework) is a DNS TXT record listing the servers allowed to send email for a domain. Receivers check it on every message; when it’s missing or broken, legitimate mail lands in spam and anyone can send as you.

What this checker looks for

  • Exactly one v=spf1 record (two or more is a permanent error)
  • DNS lookups, counted through every include: and redirect=, against the RFC 7208 limit of 10
  • A safe ending: ~all or -all, never +all
  • Includes that point at domains with no SPF record, deprecated ptr, and syntax errors
What is the SPF 10 lookup limit?

SPF evaluation may trigger at most 10 DNS lookups (include, a, mx, ptr, exists and redirect each count). Over 10, receivers return a permanent error and SPF fails for all your mail, even mail from allowed servers.

Should I use ~all or -all?

~all (softfail) asks receivers to accept but mark mail from unlisted servers; -all (fail) asks them to reject it. Most domains use ~all together with a DMARC policy, which decides what actually happens.

Can a domain have two SPF records?

No. With two v=spf1 records SPF returns a permanent error. Merge them into one record.

Clean a whole list

Upload a CSV and get every address checked: syntax, domain, mailbox, catch-all and disposable.

Start with 100 free credits
  • Finds the email column in any CSV, keeps your other columns
  • Deliverable, risky, undeliverable or unknown, with the reason for each
  • Download everything, or only the addresses that are safe to send to
  • An API for sign-up forms and CRMs
  • Lists are deleted after 30 days