Set up correctly. Nothing to do.
Works, but worth tidying up.
Missing or broken. Inboxes may send you to spam.
What SPF does
SPF (Sender Policy Framework) is a TXT record that lists every service allowed to send email from your domain. Inboxes compare it with the server that delivered each email.
The checker follows every include in your record, counts the DNS lookups, and flags the problems that make inboxes ignore SPF: more than 10 lookups, a second SPF record, includes that don't exist, loops, and endings like +all that let anyone send as you.
How to fix a broken SPF record
-
Keep one SPF record
Two records starting with v=spf1 break both. Merge them into one. The SPF generator can do it for you.
-
List every service that sends as you
Your newsletter service, your mailbox (Google, Microsoft, GoDaddy) and your store if it sends receipts.
-
Stay under 10 lookups
Remove services you no longer use. Each include can add a few lookups of its own.
-
End with ~all
This marks mail from anywhere else as suspicious. Switch to -all only when you are sure the list is complete.
Questions
What is the 10-lookup limit?
Inboxes stop reading an SPF record after 10 DNS lookups and treat it as broken. Every include, a, mx and redirect counts, and so do the lookups inside each include.
Should I use ~all or -all?
~all is the usual choice and is enough for the Gmail and Yahoo rules. -all rejects mail from any server not listed, so a forgotten service would bounce.
I found two SPF records. What now?
Combine them into a single record and delete the other. Load your domain into the SPF generator and it merges them.
Is SPF enough on its own?
No. Gmail and Yahoo also expect DKIM and DMARC from newsletter senders. The email domain checker tests all three.
More free tools
Check a record
Start for free.
Give us 30 days to try it out, totally free. Don’t like it? Go your own way, with no contracts to break, no money to lose, and no hard feelings. But we’re betting you’ll like it.