How to Check If Your SPF Record Is Configured Correctly

A misconfigured SPF record is one of the most common authentication errors in cold email. Here is how to check and fix it. Step 1: Look up your SPF record Use the free SPF Checker at Warm Inboxes. Enter your domain and it will display your current SPF record and any errors. Step 2: Verify the record contents Your SPF record should include the "include" statement for your email hosting provider: Google Workspace: include:_spf.google.com Microsoft 365: include:spf.protection.outlook.com If you use a cold email tool that sends via its own servers (some do), you may also need to include their SPF entry. Check your tool's documentation. Step 3: Check for common errors Multiple SPF records: You can only have ONE SPF TXT record per domain. If you have two, both will fail. Combine them into a single record. Missing "include" statements: If your record does not include your email hosting provider, emails sent through that provider will fail SPF. Too many lookups: SPF has a 10 DNS lookup limit. Each "include" and "a" mechanism counts as a lookup. If you exceed 10, SPF fails. Use an SPF flattening tool if needed. Syntax errors: A missing "v=spf1" prefix, incorrect "all" mechanism, or typos will cause the record to fail. Step 4: Test with a real email Send a test email from your account to an external address. Check the email headers for "spf=pass." If you see "spf=fail" or "spf=softfail," there is a configuration issue.

Ongoing monitoring

SPF records can break when you add new services, change email providers, or make DNS changes. Re-check your SPF record with the SPF Checker after any DNS modification and monthly during active campaigns.

---

Need pre-warmed inboxes ready to send today? Warm Inboxes includes free .com domains and 24/7 support. Used by agencies doing 10,000+ emails per day. Check your deliverability free →