SPF Lookup
SPF Record Lookup
Check a domain's SPF record and authorized senders.
Enter a domain above to check its SPF record
About this tool
- What is SPF?
- Sender Policy Framework. A DNS TXT record listing which mail servers are authorised to send email for your domain. Receiving servers check SPF to decide whether to trust the message.
- What is the 10-lookup limit?
- SPF evaluation is limited to 10 DNS lookups per check. Each include:, a:, and mx: mechanism costs one lookup. Exceeding the limit causes a permerror result, which many servers treat as a fail.
- What does ~all vs -all mean?
- ~all (softfail) marks unauthorised senders as suspicious but still delivers the mail. -all (hardfail) explicitly rejects unauthorised senders. Use -all once you are confident your SPF record is complete.
- Why does my SPF fail even though the record looks right?
- Common causes: forwarded mail bypasses SPF because the forwarding server's IP isn't listed, the record exceeds 10 lookups, or there are multiple SPF records on the domain (only one is allowed).