Email Warm-upSPF Record Checker
Type a domain. The checker reads its SPF TXT record from DNS, follows every include and redirect, counts the lookups against the limit of 10, and flags the errors that make receivers ignore SPF: two records, a soft or hard fail that is wrong, and senders that are missing.
What does the lookup count mean?
Every include, a, mx, ptr, exists and redirect in the record, and in the records they point to, costs one DNS lookup. RFC 7208 caps the total at 10. Above that, receivers return permerror and your SPF is ignored, which hurts DMARC alignment and placement.
~all or -all?
Use ~all (softfail) while your DMARC policy is p=none and you are still discovering every service that sends for the domain. Move to -all once the list is complete and DMARC reports are clean.
Why are two SPF records a problem?
The standard allows exactly one. Two records make receivers treat the result as a permanent error, so your mail is evaluated as if you had no SPF at all.
Frequently asked questions
Does SPF stop my emails going to spam?
On its own, no. It is one of three authentication checks (with DKIM and DMARC) that receivers require before they even consider reputation. Missing or broken SPF is a reason to be filtered; a correct SPF is the baseline.
Which include do I need for Google Workspace?
include:_spf.google.com. Gmail and Workspace both use it. Zoho uses include:zohomail.com, Amazon SES include:amazonses.com, SendGrid include:sendgrid.net, Mailgun include:mailgun.org.
Can I have SPF on a subdomain?
Yes, and you should if a service sends from a subdomain such as mail.yourdomain.com. Each sending hostname needs its own SPF record.
How often should I check?
After every change to a sending service and once a month. Vendors change their includes.
Records right? Now build the reputation.
Connect the mailbox to the free warm-up service: it sends, replies and rescues from Spam on a shared warm-up network (or a private pool per account), and tells you when you are ready for outbound.
More free tools
A day-by-day sending plan for one mailbox: start volume, daily increase, cap, weekends. Copy it or download CSV.
DKIM Record CheckerFinds a domain's DKIM public key by selector, tries the common selectors for Google, Zoho, Microsoft, SES, SendGrid and Mailgun, and validates the record.
DMARC Record CheckerReads the _dmarc record, explains the policy, alignment and reporting tags, and tells you the safe path from p=none to p=reject.
Email Blacklist CheckerChecks a domain or IP against the public DNS block lists that mail servers actually query, and explains what a listing means.