Email authentication

SPF Record Checker

Check and validate your domain's SPF record against RFC 7208. Get a 0-100 score, DNS-lookup count, policy check and prioritised fixes — free, using live DNS.

Check an SPF record

Enter a domain to fetch and validate its live SPF record.

What this SPF record checker does

Fetches your live SPF record over DNS-over-HTTPS — real data
Validates syntax against RFC 7208
Counts DNS lookups and flags the 10-lookup limit
Detects multiple SPF records (a permerror)
Checks your -all / ~all / ?all policy strength
Scores the record 0-100 with prioritised fixes

Common use cases

  1. 1Confirming SPF is set up correctly on a domain
  2. 2Diagnosing why email lands in spam
  3. 3Auditing SPF before enforcing DMARC
  4. 4Verifying a record after editing DNS
  5. 5Checking a domain you are about to send from
  6. 6Spotting duplicate or expired SPF entries

Related tools

SPF generatorSPF lookup counterSPF flattenerSPF merge toolDMARC Record CheckerEmail Authentication Analyzer

About SPF records

An SPF record is a DNS TXT record listing the servers allowed to send email for your domain. Receivers check it to detect spoofing, so a valid record protects your brand and helps your mail reach the inbox. This checker fetches the live record and scores it against the rules that mail providers actually enforce.

The most common failures are exceeding the 10 DNS-lookup limit, publishing more than one SPF record, and leaving a weak ?all policy. Fix those, then pair SPF with DKIM and DMARC for complete authentication.

More Free Tools Where This Came From

This utility is one of dozens of free, no-login tools for DNS, email, SEO and developers — all instant and private.

See All ToolsTalk to Our Team

HostCloud.in  ·  Pune, India  ·  Serving 34,987+ Websites Since 2020

FREQUENTLY ASKED QUESTIONS

Got Questions? We Have Answers.

What does the SPF record checker test?

It fetches your live SPF record and validates its syntax, counts DNS lookups against the 10-lookup limit, checks for multiple SPF records, and evaluates your all-mechanism policy — then scores the record from 0 to 100.

Why does my SPF record fail?

The most common causes are exceeding 10 DNS lookups, publishing more than one SPF record, a missing or weak ?all policy, or an unreachable include. The checker names the exact issue and how to fix it.

What is a good SPF score?

Aim for 100. Any warnings cost points; a fail (multiple records, over the lookup limit, or +all) drops the score sharply because those break authentication in practice.

Does this use my live DNS record?

Yes. It resolves your real SPF record over DNS-over-HTTPS at the moment you run the check — no cached or sample data.

How do I fix "too many DNS lookups"?

Remove senders you no longer use, consolidate providers, or flatten heavy includes into IP addresses. Our SPF Flattener and Lookup Counter help with this.

Is SPF enough on its own?

No. Combine SPF with DKIM and a DMARC policy for full protection. SPF alone does not stop all spoofing, especially of the visible From address.