SPF checker

Inspect a domain's SPF record, DNS lookup budget, and the qualifiers that determine whether unauthorized mail is rejected or merely marked suspicious.

What this SPF check returns

The audit reads the root SPF record, counts DNS-causing mechanisms, and reports whether the record ends in -all, ~all, ?all, or +all. More than ten DNS lookups produces a permanent error at many receivers.

Common SPF failures

Two SPF TXT records at the same host.
Too many include, a, mx, or redirect terms.
Ending in +all, which authorizes the entire internet.
Using SPF to authorize a marketing platform whose DKIM domain does not align.

Read how to fix SPF PermError or audit a sender include before flattening it.