SPF Record Checker
Enter any domain to instantly look up and validate its SPF record. See a plain-English breakdown of every mechanism and catch configuration errors.
An SPF (Sender Policy Framework) record tells receiving mail servers which IP addresses and domains are authorized to send email on your behalf. Use this free SPF Record Checker to instantly look up any domain's SPF record, validate its syntax, and see a plain-English breakdown of every mechanism — no account needed. Whether you're debugging email deliverability, onboarding a new email service, or auditing your DNS configuration, this tool gives you instant answers.
How to Check an SPF Record
- Enter a domain name in the input field — for example,
yourdomain.com. You don't need to includehttp://orwww. - Click "Check SPF Record" — the tool performs a live DNS TXT record lookup for the domain you entered.
- Review the raw SPF record displayed at the top of the results panel.
- Read the parsed breakdown — each SPF mechanism (
include,ip4,ip6,a,mx,redirect,all) is listed with a plain-English explanation. - Check the validation status — the tool highlights any syntax errors, missing records, or common configuration issues.
Why Use Flipper File to Validate SPF Records?
- Instant DNS lookup — results return in under a second by querying live DNS directly in your browser
- Full mechanism breakdown — every
include:,ip4:,mx,a, andalldirective is parsed and explained in plain English - Syntax validation — the tool flags common errors like too many DNS lookups (the 10-lookup limit), invalid mechanisms, and missing
allqualifiers - Visual pass/fail indicators — color-coded results make it easy to see at a glance whether the record is valid
- No login, no tracking, no limits — check as many domains as you want, completely free
- Works on any device — fully responsive design works on desktop, tablet, and mobile
Frequently Asked Questions
What is an SPF record?
An SPF (Sender Policy Framework) record is a type of DNS TXT record that specifies which mail servers and IP addresses are authorized to send email for your domain. When a receiving mail server gets an email claiming to be from your domain, it checks your SPF record to verify the sender is authorized. Without a valid SPF record, your emails are more likely to end up in spam folders.
How do I find my domain's SPF record?
Your SPF record lives in your domain's DNS settings as a TXT record. You can check it by entering your domain name in the tool above, or by running nslookup -type=TXT yourdomain.com in a terminal. Most hosting providers and domain registrars (GoDaddy, Cloudflare, Namecheap, etc.) let you view and edit DNS records in their control panel.
What does "~all" vs "-all" mean?
The all mechanism at the end of your SPF record defines what happens to mail that doesn't match any of the listed senders. -all (hard fail) tells receiving servers to reject the message outright. ~all (soft fail) tells servers to accept the message but mark it as suspicious. +all (pass all, not recommended) allows anyone to send as your domain. Most email providers recommend -all for stricter protection.
What is the SPF 10-lookup limit?
SPF records are limited to 10 DNS lookups during evaluation. Mechanisms like include:, a, mx, and redirect each count as one lookup. If your SPF record chain requires more than 10 lookups, receiving mail servers may return a "PermError" and potentially reject your mail. This tool warns you if your record approaches or exceeds this limit.
Can a domain have more than one SPF record?
No — having multiple SPF TXT records for the same domain causes a "PermError" and will break email authentication. If you need to authorize multiple email services, you must combine them into a single SPF record using include: mechanisms. This tool will flag domains with duplicate SPF records.
Why is my SPF record not working even though it looks correct?
Common causes include: exceeding the 10-lookup limit, a typo in an include: domain, a missing or incorrect all qualifier, or the record not having propagated fully after a recent DNS change (propagation can take up to 48 hours). Run your domain through this tool to check for syntax errors and lookup count issues.
What's the difference between SPF, DKIM, and DMARC?
SPF, DKIM, and DMARC are three complementary email authentication standards. SPF specifies which servers can send as your domain. DKIM adds a cryptographic signature to outgoing messages to prove they haven't been tampered with. DMARC builds on both, telling receiving servers what to do when SPF or DKIM checks fail (quarantine or reject). All three should be configured for best email deliverability.
Does this tool store my lookup data?
No — all DNS queries are performed directly in your browser. No domain names or results are stored, logged, or shared. There's no account required and no data is retained after you close the page.