How-To

How to check your SPF record and fix the common errors

Inboxlogy6 min readUpdated 2026-10-26

In short: To check your SPF record, open a free SPF Checker, enter your domain, and read the result. It shows your full record, whether the policy is a soft or hard fail, and your DNS lookup count against the limit of 10. The most common fixes are removing a duplicate SPF record, getting back under 10 lookups, and choosing the right all policy.

On this page

  1. When should you check SPF?
  2. How to check your SPF record step by step
  3. How to fix the most common SPF errors
  4. What to check after SPF

When should you check SPF?

Check your SPF record whenever you set up a new sending domain, add a new email tool, migrate providers, or notice mail landing in spam. Because SPF silently breaks when you exceed 10 lookups, it is worth re-checking any time you add another include: to the record.

How to check your SPF record step by step

  1. Open the SPF Checker. Go to the free Inboxlogy SPF Checker.
  2. Enter your domain. Type the bare domain, for example yourdomain.com.
  3. Click Check SPF. The tool reads your live DNS and finds your v=spf1 record.
  4. Read the policy. It tells you whether you end in ~all (soft fail) or -all (hard fail), and flags if no SPF record exists.
  5. Check the lookup count. The tool counts DNS lookups and warns you if you are near or over the limit of 10.

How to fix the most common SPF errors

Three problems cause most SPF failures:

  • Two SPF records. Merge them into one. Multiple v=spf1 records cause a permerror.
  • Too many lookups. Remove unused include: entries, or replace services you no longer use. If you are stuck, consider SPF flattening.
  • Wrong policy. If legitimate mail is being rejected, you may be on -all before every sender is listed. Move to ~all until your setup is complete, then tighten.

To build a clean record from scratch, use the SPF Generator, then re-check.

What to check after SPF

SPF is one of three authentication records. Once it passes, verify your DKIM signature and your DMARC policy. All three need to be in place and aligned for the best inbox placement on cold email.

Check and fix your SPF record

See your record, policy and DNS lookup count instantly. Free, no sign-up, runs in your browser.

Open the SPF Checker →All free tools

Frequently asked questions

How do I know if my SPF record is valid?
Run your domain through an SPF Checker. A valid record has exactly one v=spf1 entry, stays under 10 DNS lookups, and ends in a clear policy (~all or -all). The tool flags any of these that are wrong.
How do I check SPF for a subdomain?
Enter the full subdomain (for example mail.yourdomain.com) into the checker. Subdomains can have their own SPF record separate from the root domain, so check the exact hostname you send from.
Why does my SPF pass in one tool but fail in another?
Usually it is the lookup count. Some tools count DNS lookups strictly and some do not. If you are near 10, different evaluators can disagree. Treat anything at 8 or above as a risk and reduce it.
Is checking SPF free?
Yes. The Inboxlogy SPF Checker is completely free, runs in your browser, and never asks for an account.

Keep reading

SPF GeneratorBuild a valid SPF recordDMARC CheckerRead your DMARC policy in plain EnglishDKIM CheckerValidate your DKIM public keyDNS Record CheckerLook up A, MX, TXT, NS in one click