What is an SPF record?

SPF (Sender Policy Framework) is a DNS TXT record that specifies which mail servers are authorized to send email on behalf of your domain. It helps prevent email spoofing and improves deliverability.

When an email is received, the recipient's mail server checks the SPF record of the sender's domain. If the sending server's IP is listed in the SPF record, the email passes SPF authentication. Otherwise, it may be marked as spam or rejected.

What does ~all vs -all mean in SPF?

'-all' (hard fail) means emails from unauthorized servers should be rejected. '~all' (soft fail) means they should be accepted but marked. '+all' allows anyone to send (not recommended). '?all' is neutral.

How many DNS lookups can an SPF record have?

SPF records are limited to 10 DNS lookups (include, a, mx, ptr, redirect mechanisms). Exceeding this limit causes SPF to fail (permerror). Use ip4/ip6 mechanisms to reduce lookup count.

Why is my SPF record not found?

Your domain may not have an SPF record published in DNS, or it may be misconfigured. Add a TXT record starting with 'v=spf1' to your domain's DNS zone. Changes may take up to 48 hours to propagate.

Free SPF Record Checker

🛡️

📧

✅

DKIM Checker DMARC Checker BIMI Checker Blocklist Checker Header Analyzer