Tools

SPF record checker

Resolve a domain's SPF TXT record, parse every mechanism, count DNS lookups against the spec's 10-lookup ceiling, and flag the all-qualifier so you know if spoofing is actually blocked.

What we check

  • v=spf1 — record must start with the spec version.
  • Single record — RFC 7208 requires exactly one SPF record per domain. Multiple → PermError.
  • DNS lookup budget — every include, a, mx, exists, ptr, and redirect counts. Limit is 10.
  • All qualifier — +all authorises every sender (bad). ~all = soft fail, -all = hard fail.
  • Deprecated mechanisms — ptr is deprecated; many receivers ignore it.

SPF is one of three records that matter.

SNDR walks you through SPF, DKIM, and DMARC the moment you add a sending domain — and re-checks them on every send. No DNS spelunking required.

Start freeRead the docs