Tool

SPF Record Checker

Check if a domain has a valid SPF record — see which senders are authorised, the enforcement policy, and include depth.

What is SPF?

Sender Policy Framework (SPF) is a DNS record that specifies which mail servers are authorised to send email from a domain. It helps prevent email spoofing and phishing. The -all directive means strict enforcement — any unlisted sender is rejected outright.

SPF policy strength explained

-all

Hard fail — Reject all unlisted senders. Strongest protection — recommended.

~all

Soft fail — Accept but flag suspicious senders. Good for testing before going strict.

?all

Neutral — No enforcement. Practically the same as having no SPF.

+all

Pass all — Allows any sender to send as your domain. Never use this.

Frequently asked questions

Why does SPF fail even with a record?

Common causes: sending from an unlisted IP, more than 10 DNS lookups (includes + redirects), or a forwarded email changing the envelope-from.

What is the 10-lookup limit?

RFC 7208 limits SPF evaluation to 10 DNS lookups. Exceeding this causes a "permerror" — email may be rejected even from legitimate senders.

Should I use SPF alone?

SPF alone is not enough. Pair it with DKIM signatures and a DMARC policy for full email authentication protection.

More Free Email Tools

Email Validator

Check format, MX records, disposable & role-address detection.

MX Lookup

Find mail servers for any domain with priority & TTL.

DMARC Checker

Check DMARC policy strength, coverage, and reporting.

Header Analyzer

Decode delivery path, auth results, and spam signals.

Need a disposable email address?

Instant free temp inbox — no signup, real-time delivery.

Get temp email