SPF Record Checker
Check which servers are authorized to send email for your domain.
What this test checks
One record, syntax, DNS lookup budget, includes, redirects and recursion errors.
Why this matters
SPF limits envelope senders, but alone does not protect the visible From address. DMARC connects authentication with the visible sender domain.
How to fix common problems
Publish exactly one SPF record and keep DNS-triggering mechanisms within ten lookups.
FAQ
Why does the lookup limit matter?
RFC 7208 limits an SPF evaluation to ten DNS-triggering terms.
Is ~all always wrong?
No. It can be a transitional policy; choose it after understanding every legitimate sender.