Free SPF checker
SPF checker — lookup and validate your live record.
Enter a domain for an SPF record checker and live SPF lookup. Walk includes, count DNS lookups, and surface configuration warnings. No account required.
Use the domain you send From (or your bounce domain) — not only your website host.
How to use this tool
Make one small, informed decision.
- 1.Enter the domain you send From (or your bounce / MAIL FROM domain).
- 2.Click Check domain and wait for live DNS resolution and include walking.
- 3.Review pass or fail status, lookup count, policy, and warnings before scaling outbound.
What the result means
Pass means the published record is structurally sound under our rules — not that a specific IP is authorized. Watch for multiple v=spf1 records on one name, lookup counts at or over 10, and unsafe +all. Soft-fail (~all) often still delivers but weakens authentication.
Limitations and privacy
This is a live DNS check of the domain you enter. We cache results briefly to limit load; nothing else is stored.
Why this matters
Domain setup is part of safer outbound.
What SPF is
Sender Policy Framework (SPF) is a DNS TXT record that lists which servers are allowed to send email for your domain. Receivers look it up when mail arrives and decide whether the sending host matches your published policy.
Why SPF matters for outbound
Before you launch outbound email, a missing or broken SPF record can send your first touches to spam — or have them rejected. Checking the domain you send From is part of a deliverability-conscious, approval-first workflow.
What the 10 DNS lookup limit means
RFC 7208 caps SPF at 10 DNS-querying terms (include, a, mx, ptr, exists, redirect). Nested includes count toward that total. Over the limit, receivers treat the check as a permanent error — even if the record “looks fine.”
Common SPF problems
No record at all; two v=spf1 records on the same name; +all (authorizes everyone); include chains past 10 lookups; checking the website host instead of the From / bounce domain; and soft-fail (~all) when you intended a hard fail (-all).
Related tools
Common questions
SPF Checker FAQ
Which domain should I check?
Check the domain in your From address (or the bounce / MAIL FROM domain your ESP uses). Checking only your marketing website can show “no SPF” even when your sending domain is configured correctly.
Does a Pass mean my email will reach the inbox?
No. This tool walks the published SPF configuration. It does not authenticate a specific sending IP, and it does not replace DKIM, DMARC, content quality, or reputation. Pass means the record is structurally sound under our conservative rules.
Why do I see Needs attention when mail still sends?
Soft-fail (~all), high lookup counts, and vendor include chains often still “work” in practice while receivers treat them weakly. We prefer warning over a false all-clear so you can fix the record before you scale outbound.
What counts toward the 10-lookup limit?
Each include, a, mx, ptr, exists, and redirect term counts as one. Nested includes add more. ip4, ip6, and all do not count. We list every counted term so you can verify the math.
Is this the same as a full SPF authentication test?
No. Full evaluation needs a sending IP and envelope-from address. This checker is a configuration analyzer — the right first step before launch, not a substitute for provider diagnostics.
Next step
Domain checked. Ready to run outreach you approve first.
OmniReach drafts personalized LinkedIn and email sequences. You review the first touch — nothing sends in the background without a deliberate launch.
Free forever tier · No credit card required · Setup in 2 minutes