SPF Record Checker

Validate any domain's SPF record against the RFC 7208 lookup limits — no account required. We run the same engine the OnlyDMARC platform uses.

Enter a domain to check

We'll look up the SPF record for the domain and count its DNS lookups against the RFC 7208 limit of 10.

  Free and anonymous — no account, no sign-up. Runs the same RFC 7208 engine as the OnlyDMARC platform.

SPF record looks good
Your SPF record is published and within the RFC 7208 limits.
example.com
checked at 14:28 UTC
v=spf1 -all

DNS lookup budget

SPF allows at most 10 DNS-lookup mechanisms (RFC 7208 §4.6.4). Your record's own mechanisms use 0 of 10; fully expanding every include reaches 1.. Past 10, receivers return a permanent error and stop evaluating your SPF.
Record mechanisms (no recursion) 0 / 10
Fully expanded (all includes resolved) 1 / 10

What we found

Good Strict `-all` policy

`-all` tells receivers to reject any sender not listed in your SPF record — the strongest SPF stance.

What to do: No action needed. Keep monitoring for sender changes.

Learn more →

Before you publish

  • Confirm every legitimate sender is still covered — SPF only authorises what's listed.
  • Keep ~all (soft-fail) until you've watched reports and confirmed nothing legitimate fails.
  • Change one thing at a time and re-check here before moving to -all.
https://onlydmarc.com/spf-check?domain=example.com
domain=example.com; code=Found; checkedAtUtc=2026-07-25T14:28:22.5436075Z

Fix or rebuild example.com's SPF

Open this record in the generator to tidy it up, flatten includes, or start fresh.

Open in the SPF generator

Keep it healthy — monitor for drift

Records drift as senders change. OnlyDMARC watches your SPF and DMARC around the clock and alerts you when something moves.

Start monitoring

Why we warn: we flag real RFC problems, not upsell bait — this checker is complete and free on its own.