SPF record checker
Use this SPF record checker to expand includes and inspect candidate IP ranges. Add your public sending IP to trace mechanism order, macros and the DNS lookup limits.
Free, no account. Ten lookups per hour, shared with our other domain checks.
Email deliverability checks
Check the sending identity, domain policy, receiving servers and an actual received message together. These checks explain configuration; they cannot certify delivery to an inbox.
- SPF
- Authorize your sending IP and trace the DNS lookup budget.
- DMARC / DKIM
- Check policy, alignment settings, reporting permissions and public keys.
- MX
- Inspect incoming servers, addresses, reverse DNS and the public blocklist.
- Email headers
- Read actual receiver results, forwarding assertions and hop delays locally.
- DKIM
- Read the public key for a selector, or try common provider selectors.
- Blocklists
- Check mail server addresses on DNS blocklists, with removal steps.
- MTA-STS
- Check the TLS policy for incoming mail, its MX match and TLS reports.
- BIMI
- Check the BIMI record, the SVG logo, the certificate and DMARC readiness.
Google and Yahoo bulk sender requirements
Requirements checked 2026-10-12. Google applies its bulk rules above 5000 messages per day to personal Gmail accounts. Yahoo describes bulk senders without publishing the same numeric threshold.
- Publish SPF and sign with DKIM. Publish DMARC with at least p=none, and align the visible From domain with a passing SPF or DKIM identity.
- Use valid forward and reverse DNS and correctly formatted messages. Google also requires TLS transport. Keep reported spam rates below 0.3 percent.
- Marketing and subscribed messages need one-click unsubscribe headers plus a visible unsubscribe link. Honor unsubscribe requests within two days.
- Google requires RSA DKIM keys of at least 1024 bits and recommends 2048 bits. A DNS key check does not prove that outgoing mail is signed.
Spam rate, unsubscribe behavior and real SMTP TLS are outside a DNS check. Verify them with your mail service and a received message.
Google sender guidelinesYahoo sender requirementsYahoo bulk sender definition
An SPF record checker reads the DNS record that authorizes sending servers. This tool expands includes and redirects, resolves candidate IP ranges and flags risky all settings, duplicate records and syntax errors. An optional sending IP test traces reached mechanisms and counts DNS terms and void answers. A flattened preview requires a safe fixed equivalent.
How to use this checker
- Enter your domain
- Use the domain in your From or Return-Path address. We read its TXT records and keep the one that starts with v=spf1.
- Follow the includes
- Each include, a, mx, ptr, exists and redirect costs one DNS lookup, and so do the ones inside an include. We expand them in order and show the total.
- Fix what is flagged
- Remove services you no longer use, replace ptr and end the record with ~all or -all. Over 10 lookups, ask a provider for a narrower include or send its mail from a subdomain.
Questions about this checker
Check your business in AI answers
A valid SPF record keeps your mail out of spam. The free AI visibility scan shows how ChatGPT and other assistants describe your business.