Skip to content

SPF Record Checker

The SPF Checker analyses and validates the SPF (Sender Policy Framework) records for your domains. It helps identify configuration issues that could affect email deliverability and DMARC compliance.

Purpose

The SPF Checker evaluates your SPF records to detect common configuration errors and provides actionable recommendations. SPF works by creating a DNS record listing the mail servers authorised to send emails on behalf of your domain, helping prevent email spoofing.

Use this tool to:

  • Check all your domains have SPF records setup
  • Verify that your SPF records are correctly formatted
  • Identify DNS lookup limit issues
  • Detect configuration errors that may affect deliverability
  • Get specific recommendations for improvement

Note: While SPF is one authentication method for DMARC compliance, many services do not align the return-path and Header From. Adding these services to your SPF record is redundant.

Key Points

  • SPF records must follow strict syntax rules to be effective
  • SPF records have a limit of 10 DNS lookups which must not be exceeded
  • SPF records of mail sending domains should end in ~all (softfail) not -all (fail)
    • This is to ensure mail is not prematurely rejected before DKIM is evaluated
  • Common issues include syntax errors and lookup limit violations

Checker Functionality

The SPF Checker provides:

  • Record Validation: Confirms your SPF record follows correct syntax and best practice
  • DNS Lookup Count: Tracks the number of DNS lookups your record requires
  • Record Expansion: Shows the fully expanded SPF record after resolving all includes

Issue Detection

The checker identifies common SPF configuration issues:

  • Missing Records: When a domain has no SPF record
  • Syntax Errors: Invalid formatting or directives
  • Lookup Limit Violations: Configurations that exceed the 10 lookup limit
  • Inconsistent Configuration: Conflicting mechanisms or incomplete coverage
  • Common Mistakes: Identifies frequently seen misconfigurations

Recommendations

Based on the analysis, the SPF Checker provides:

  • Specific Fixes: Actionable suggestions to resolve identified issues
  • Best Practice Guidelines: Recommendations aligned with email authentication standards

Using the Checker

  1. Review Analysis: Check domains with an Error or Warning result
  2. Apply Recommendations: Implement the suggested changes to your DNS records
  3. Recheck: After waiting for DNS changes to propagate, check the report again