Free domain diagnostic

SPF Checker

Check a domain's SPF record, validate common problems, and understand what the policy means.

What this checker tests

  • Published SPF TXT record
  • Mechanisms, modifiers, and qualifiers
  • Duplicate records and syntax
  • Estimated DNS-lookup count and permissive policies

How to understand the result

SPF lists the services allowed to send email for a domain.

A soft fail (~all) marks other senders as suspicious; a hard fail (-all) asks receivers to reject them.

Unusual does not always mean broken—confirm every legitimate sender before changing a policy.

Common problems

  • More than one SPF record
  • More than ten DNS-triggering mechanisms
  • A dangerously permissive +all policy
  • Missing includes for legitimate sending services