Check an SPF record
Understand who your SPF record authorizes
Enter a domain to inspect its published SPF configuration.
-
1
Find the record We look up the domain’s TXT record for its SPF configuration.
-
2
Inspect syntax & policy We analyze the SPF record, including its policy and mechanisms.
-
3
Review dependencies We identify any included domains and DNS lookups.
This checks a published configuration, not a specific email message.
Understand SPF
SPF publishes which sending hosts may use a domain in SMTP. This tool reviews the DNS configuration. A sender test also needs a sending IP and identity. A published record does not by itself authorize a message.
Frequently asked questions
What is an SPF record?
An SPF record is a TXT record that lists mechanisms for the hosts allowed to use the domain in SMTP. This page reads that published record. It does not check one email message.
What does ~all mean?
~all is softfail, a valid policy. A sender that matches no earlier mechanism receives softfail. The receiving server decides what to do with that result.
Why is there a lookup limit?
RFC 7208 limits evaluation to 10 DNS-querying terms, such as include, a, mx, ptr, exists and redirect. The number on this page is a static estimate unless a sender IP is evaluated. It does not by itself prove a permanent error.
What if my domain has multiple SPF records?
More than one TXT record that starts with v=spf1 is a permanent error in RFC 7208. Keep a single record. The receiver decides how to handle the result.
Does this authorize a specific sender?
No. This page reviews the published record. A result for one message also needs the sending IP and the identity used in SMTP.