> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dmarceye.com/llms.txt
> Use this file to discover all available pages before exploring further.

# SPF Checker

> Validate your SPF record, count your DNS lookups against the limit of ten, and see how each mechanism resolves.

## Where to find it

Select **DNS Tools** in the left navigation, then the **SPF Scanner** tab. Enter a domain and select **Check SPF**.

## Reading the results

The **SPF Record** card shows a **Valid** or invalid badge, the full record with a copy control, and an advisory line calling out anything worth tightening — for example, "Using \~all (softfail) is good but -all is more strict."

Three figures summarise the record:

| Figure      | What it means                                                                   |
| ----------- | ------------------------------------------------------------------------------- |
| DNS Lookups | How many of your ten permitted lookups the record consumes, and how many remain |
| Mechanisms  | The total number of mechanisms in the record                                    |
| Includes    | How many `include:` statements pull in another sender's SPF record              |

## The ten-lookup limit

SPF allows a maximum of ten DNS lookups when a record is evaluated. Go over it and receiving servers return a permanent error, so your SPF stops working even though the record still looks correct. Every `include:` costs at least one lookup, and an include that itself contains includes costs more. **DNS Lookups** is the figure to watch as you add senders.

## Mechanisms

Each mechanism is listed with the result it produces and the provider it refers to:

* **Pass** — the sender is authorised. Each `include:` names the provider it pulls from.
* **SoftFail** — produced by `~all`, marking anything not listed above as suspicious but still deliverable.
* **Fail** — produced by `-all`, rejecting anything not listed.

## Protected by DMARCeye

When the scanned domain is monitored in your account, a **Protected by DMARCeye** panel confirms it below the results.

To build or change an SPF record rather than inspect one, use the SPF Configuration path in the [DMARC Configurator](/dmarc-configurator).