SPF checker: look up your SPF record

Find your SPF record, review its syntax and follow its include and redirect chains. Identify duplicates and potential DNS lookups before changing your configuration.

No https://, paths or email addresses.

Public records queried through Cloudflare.

How to check your SPF record

Enter the envelope sender domain, also known as MAIL FROM or Return-Path. It can differ from the domain shown in the From field. The tool looks for a TXT record starting with v=spf1 and follows its include and redirect chains.

A domain must publish at most one SPF record. Two separate records are not combined: they cause an SPF error. Before editing it, list the services that actually send through that domain.

How to read an SPF record

In this illustrative example, ip4 authorizes one address and -all says other senders are not authorized. Do not copy this documentation IP into your domain. An include checks another domain’s policy; a redirect replaces the policy where applicable.

v=spf1 ip4:192.0.2.1 -all

The DNS lookup limit

SPF limits DNS-triggering terms to ten during an evaluation. Here we count potential terms across the branches inspected; the actual path depends on the IP and sender. Message-dependent macros are marked as unresolved. The void-lookup limit for a particular message is not evaluated either.

This analysis does not return a pass/fail result for a real email or confirm deliverability. To check a sent message, also review its Authentication-Results headers and DMARC alignment.

Frequently asked questions

Is it free, and do I need an account?

It is free and requires no registration. Check one domain at a time. Usage limits help keep the service available.

Does this change my configuration?

No. It reads public records. It does not request access to your email account or change DNS. The queried name is sent to Cloudflare’s public resolver to obtain the answer.

Technical documentation