SPF checker
Enter a domain. We find its SPF record, break it into its parts, count the DNS lookups it needs, and tell you in plain words what would make receivers reject or distrust it.
Watch this every hour, free.
SPF breaks quietly: someone adds a second record, or a new include pushes you past 10 lookups. PingWise checks SPF, DKIM and DMARC every hour, free, and alerts you when one breaks. How the monitor works.
Related tools: MX lookup · DKIM checker · DMARC checker · Blacklist check · DNS lookup
What is SPF?
SPF (Sender Policy Framework) is a TXT record that lists the servers allowed to send email for your domain. When a message arrives, the receiving server checks whether it came from one of them. Gmail, Outlook and Yahoo all check it.
Why is there a limit of 10 DNS lookups?
The SPF standard sets it so a check can’t trigger endless lookups. Every include: from a mail service adds its own lookups, so domains that use several services hit 10 fast.
Should I use ~all or -all?
Start with ~all while you make sure every service that sends for you is listed, then move to -all if you want stricter rejection. With DMARC in place, receivers rely on DMARC’s policy anyway.
I added a new email service. What do I change?
Add its include: to your existing record. Don’t create a second SPF record.
Is SPF enough on its own?
No. It doesn’t protect the «From» address people see. That’s what DKIM and DMARC are for: check them with the DKIM checker and DMARC checker.
How often can I check?
Up to 60 lookups an hour from your network. On the DKIM checker, «Try the common ones» counts as one.
Do you store what I look up?
We keep your IP address and the time for one hour, only to limit how often you can check. We don’t keep the domain or address you entered. Results are cached for a few minutes, so a repeat check may show the same answer.