Available at https://www.suped.com/tools/spf-checker.
Enter any domain to look up its SPF record. The checker performs a live DNS lookup, parses the record, follows every include:, redirect=, a, and mx mechanism, and runs a series of pass/fail checks against best practices.
How it works
Enter a domain and click Check. Results show a total tests passed score, the raw SPF TXT record, a tree of resolved mechanisms, and a detailed checks table. Click Info on passing checks or Fix it on failing checks for the full explanation and remediation steps.
Click View sample to see results for suped.com without entering a domain.
Checks
Record
- SPF record found
- Single record (no duplicates)
- Record valid (syntax)
- Under 10 DNS lookup limit (RFC 7208
permerrorthreshold) - Under 2 void lookup limit
- No include loops
- Under 450 byte limit
Mechanisms
- Ends with
~allor-all - No
+all(authorizes everyone) - No deprecated
ptrmechanism - No duplicate includes
- No empty includes (includes that resolve to nothing)
- No macros
- At least 1 IP or include authorized
DMARC alignment
The checker also pulls the domain's DMARC record and adds two more checks so you can see whether SPF is doing its job as part of a full DMARC setup.
- DMARC record published
- DMARC policy enabled (
quarantineorreject)
In-app version
The same SPF checker is available inside the app under Tools → SPF checker. Use it the same way you would the public tool. Results and the share link are identical to the public version.
