Can a domain have two SPF records?

Short answer

No. A domain must publish exactly one SPF record. Two or more SPF TXT records cause a PermError and receivers may ignore SPF entirely — regardless of how many lookups each uses. The fix is to merge them into a single record by combining their mechanisms.

Why two records break SPF

RFC 7208 is explicit: a domain that publishes more than one record starting with v=spf1 produces a PermError. This often happens when a second mail service tells you to “add this SPF record” and you create a new TXT record instead of editing the existing one.

How to merge

Keep one v=spf1 record. Move every include: and mechanism from the extra records into it, then delete the extras. Example: combining Google and a marketing ESP becomes v=spf1 include:_spf.google.com include:servers.mcsv.net ~all. Watch the 10-lookup limit as you combine.

  1. 1

    Check how many SPF records exist

    Count the lines beginning with v=spf1:

    $ dig TXT yourdomain.com +short

Check your SPF record now

Open the free SPF checker →

Frequently asked questions

Can I have separate SPF records for subdomains?

Yes — each distinct hostname (the apex, mail., etc.) may have its own single SPF record. The “one record” rule applies per hostname, not per organization.

Does merging risk the lookup limit?

It can. Combining includes adds their lookups together, so after merging, re-check you are still under 10.

The single-record requirement is in RFC 7208 §3.2.

Reviewed by the Skysnag Security Team. Last updated .