Free SPF record checker · Instant · No signup

SPF Record Checker

Validate your SPF record instantly. Domain Doctor checks for a single valid record, the 10-DNS-lookup limit, and whether your policy actually blocks spoofed mail.

19 checks per scan Results in seconds Free, no signup

The tool

What the SPF Record Checker checks

SPF (Sender Policy Framework) lists which servers are allowed to send email for your domain. Receivers check it to decide whether a message is legitimate. Get it wrong and your real mail lands in spam, or spoofed mail gets through.

Domain Doctor confirms you have exactly one v=spf1 record, counts your DNS-querying mechanisms against the RFC 7208 limit of ten, and checks your terminal qualifier. -all (hard fail) is strongest; ~all (softfail) is acceptable; +all offers no protection at all.

How it works

Check your domain in three steps

1Enter your domainType any domain into the box above and start the free scan. No signup, no software.

2We inspect it liveDomain Doctor reads your SPF record and counts DNS lookups, in real time from our servers.

3Get a clear verdictYou get a plain-language result, the exact records we found, and a concrete fix if anything is wrong.

What to watch for

Common SPF Record Checker problems

Two SPF records, which causes a PermError and breaks SPF
More than 10 DNS lookups from nested includes
Ending in +all, which authorises every sender on the internet
Using the deprecated ptr mechanism
Forgetting to include a new email provider after migrating

VASTROX Email Security

A clean, valid SPF record, done for you

We combine every sender into one record, keep you under the 10 lookup limit, and end it in -all so spoofers are blocked.

One valid SPF record, no errors
Kept under the 10 DNS lookup limit
Hardened to -all without breaking real mail

Fix my SPF Talk to VASTROX about email

Hosting, VPS, business email and game servers. Free migration. Real support.

Questions

Frequently asked

How many SPF records should I have?

Exactly one. Multiple v=spf1 records make SPF fail. Merge all mechanisms into a single TXT record.

What is the SPF 10-lookup limit?

SPF allows a maximum of 10 DNS-querying mechanisms (include, a, mx, ptr, exists, redirect). Exceed it and SPF returns PermError, so legitimate mail can fail.

Should SPF end in -all or ~all?

-all (hard fail) gives the strongest anti-spoofing protection. ~all (softfail) is acceptable while you confirm every sender is listed. Never use +all.