SPF record lookup
Look up a domain's SPF record, count its DNS lookups against the limit of 10, and get the exact record that fixes what is wrong. Free, no signup.
Reads public DNS only: nothing is changed and no email is sent.
What the check reads
Every server allowed to send as your domain, within 10 lookups.
- Mechanisms
- include:, a, mx, ip4: and ip6: list the servers and services allowed to send for you.
- DNS lookups
- include, a, mx, exists and redirect each cost a lookup, counted through every included record. The limit is 10.
- Void lookups
- Lookups that find nothing. Receivers may fail SPF after two.
- The all qualifier
- What happens to mail from servers not listed: ~all (suspicious), -all (reject), never +all.
Questions, answered
Before you change the record.
Why does SPF have a limit of 10 lookups?
RFC 7208 caps the DNS lookups a receiver makes while evaluating SPF at 10. Each include, a, mx, exists and redirect counts, including the ones inside the records you include. Past 10, SPF fails for every message.
What is a void lookup?
A lookup that finds nothing, for example an include of a domain with no SPF record. RFC 7208 lets receivers fail SPF after two of them, so remove includes that no longer resolve.
Should my record end in ~all or -all?
Both tell receivers that servers you did not list are not yours. ~all asks them to treat that mail as suspicious, -all to reject it. With DMARC enforced, receivers apply your DMARC policy either way.
Can I have two SPF records?
No. With more than one v=spf1 record, SPF fails for every message. Merge them into one record that lists every service.
Related tools