SPF Record Lookup

Check SPF records to spot misconfigurations that could let spammers send emails from your domain.

Our SPF Record Lookup analyzes your DNS, highlights common pitfalls, and helps you apply the correct configuration.

Enter the root domain only (no https://, no paths).
Please enter a valid domain, e.g. example.com.
You must agree before scanning.
Illustration: scanning a domain’s SPF record

Verify Your Email Security with an SPF Record Check

Use DMARCFlow’s SPF Checker to confirm that your outbound emails are properly authenticated. An SPF record helps prove that messages sent from your domain are legitimate and haven’t been forged.

Start by verifying that your domain has an SPF record. Then ensure it’s correctly configured. Even small mistakes - like syntax errors or too many includes - can break SPF. DMARCFlow gives you a clear view of your SPF structure and all authorized sending sources.

Want to see how it works? Watch our short video guide on using the SPF test tool.

SPF validation chart preview
DMARCFlow application on a laptop

What Is SPF?

SPF (Sender Policy Framework) lets you declare which servers may send mail for your domain. Receiving servers check your DNS SPF record; if the sender isn’t authorized, the message may be flagged or rejected.

Correct SPF helps prevent phishing and improves deliverability so legitimate mail reaches the inbox.

How to Implement, Manage,
and Validate Your SPF Record Effectively

A step-by-step guide to keep your domain protected and emails in the inbox.

Start with a Clear SPF Record

Include only trusted sending sources. Keep mechanisms minimal for clarity and speed.

Use 'include' Carefully

Only include services you actually use (e.g., Mailchimp, Google Workspace). Verify each provider’s SPF syntax.

Avoid Exceeding the 10 DNS Lookup Limit

SPF permits max 10 DNS lookups. Flatten/optimize to avoid permerror failures.

Test Your SPF Record Regularly

Validate SPF after any change to mail servers or providers to catch regressions early.

Monitor and Review Sending Sources

Audit who can send for your domain and update SPF to remove stale or risky sources.

Frequently Asked Questions

Common questions about SPF records

SPF is an email authentication protocol that lets domain owners declare which mail servers are authorized to send on their behalf, reducing spoofing.

It helps prevent your domain from being abused in phishing and spam by verifying the sender against your published policy.

Add a DNS TXT record on your domain listing the IPs/hosts allowed to send for you (e.g., v=spf1 include:example.net -all).

Legit mail may be spam-foldered or rejected, and attackers could exploit gaps to spoof your domain.

SPF is essential but should be paired with DKIM and DMARC for defense-in-depth.