SPF Lookup
SPF Record Lookup
Check a domain's SPF record and authorized senders.
Enter a domain above to check its SPF record
About this tool
What is SPF?
Sender Policy Framework. A DNS TXT record listing which mail servers are authorised to send email for your domain. Receiving servers check SPF to decide whether to trust the message.
What is the 10-lookup limit?
SPF evaluation is limited to 10 DNS lookups per check. Each include:, a:, and mx: mechanism uses one lookup. Exceeding the limit causes a permerror result, which many servers treat as a fail.
What does ~all vs -all mean?
~all (softfail) marks unauthorised senders as suspicious but still delivers the mail. -all (hardfail) explicitly rejects unauthorised senders. Use -all once you are confident your SPF record is complete.
Why does my SPF fail even though the record looks right?
Common causes: forwarded mail bypasses SPF because the forwarding server's IP isn't listed, the record exceeds 10 lookups, or there are multiple SPF records on the domain (only one is allowed).