SPF Checker
Validates a domain’s SPF (Sender Policy Framework) record — the DNS record that lists which servers are allowed to send email for your domain.
Try it: sendlucid.com/spf-checker
What you give it
A domain (e.g. yourbrand.com).
What it checks
- The domain has an SPF record, and only one (multiple SPF records is an error).
- The record stays within SPF’s 10 DNS-lookup limit — exceeding it causes SPF to fail.
- The fallback policy — the
allmechanism:-all(strict, recommended),~all(soft-fail),?all(neutral), or+all(insecure).
It returns the raw record, the parsed mechanisms, the lookup count, and any issues found.
Why it matters
SPF is one of the three pillars of email authentication. A missing, duplicated, or overly permissive SPF record weakens authentication and hurts inbox placement.
How to read it
A healthy result has exactly one record, under 10 lookups, ending in -all (or at least
~all). If you’re over the lookup limit, consolidate or flatten includes; if you see +all,
tighten it immediately.