TenantWard
Sign inStart free

SPF record checker

Check whether a domain's SPF record is valid, lists the right senders and stays within the 10-lookup limit.

Results in about ten seconds. No sign-up; we only read public records.

Want the full picture? Connect Microsoft 365 or Google Workspace, read-only, with a 7-day trial.

northwind-dental.com

Example report

58/100

Some real gaps: 3 to fix and 1 to review.

Email45
Domain60
Website80
  • CriticalNothing stops criminals sending email as this domain
  • HighMicrosoft 365 isn't signing your email (DKIM)
  • HighYour domain isn't locked against transfers
  • MediumYour website's certificate expires in 12 days

6 checks passing

What the SPF check looks at

Every tool runs the same free check, which reads your MX, SPF, DKIM, DMARC, MTA-STS, website certificate, HTTPS, registration, DNSSEC and lookalike domains in one go.

  • Whether exactly one SPF record exists
  • Syntax and the all mechanism (+all, ?all, ~all or -all)
  • DNS lookups, including nested includes, against the limit of 10
  • Whether your mail provider, such as Microsoft 365 or Google Workspace, is included

Questions

What happens if SPF has more than 10 lookups?
SPF returns a permanent error and receivers treat the result as a failure, which can hurt delivery and DMARC.

See where your company stands

Check a domain for free, then connect Microsoft 365 or Google Workspace for the full checkup. Every new workspace gets a 7-day trial, no card needed.

Start freeSee pricing