Enter domain
Enter the domain you want to check (e.g. example.com).
Check SPF records and validate your domain sender policyAnyone on the internet can send an email claiming to be from your domain; that is how email was designed. SPF is the countermeasure, and this validator queries your live TXT records and breaks the policy down mechanism by mechanism.
Check SPF records and validate your domain sender policy
Enter the domain you want to check (e.g. example.com).
Click "Check SPF" and wait for the live DNS lookup to finish.
Review the verdict, the parsed mechanisms, and the fix suggestions.
SPF is one of the three pillars of email authentication, alongside DKIM and DMARC. Without a correct SPF record, anyone can send mail that appears to come from your domain. The SPF Checker queries your live TXT records, finds the v=spf1 policy, and breaks it down mechanism by mechanism. It also counts your DNS lookups against the strict limit of 10 and tells you in plain language what to fix, so your legitimate mail keeps landing in the inbox.
Check, fix, re-check.
After adding a marketing platform or migrating providers, confirm the merged record is valid and under the limit.
The parsed mechanisms show which include is missing or which sending service was never added.
DNS changes propagate on TTL, so re-run the check after each edit to confirm the world sees the new policy.
Each third-party service adds lookups; the tool counts them all toward the ten-lookup limit.
The checks that bite.
Every include, a, mx, ptr, exists and redirect costs a lookup; exceed ten and SPF fails for legitimate mail too.
The deprecated ptr mechanism is flagged whenever it appears in the record.
Verifies you have exactly one SPF record, since multiple records invalidate each other entirely.
Checks whether you end with a softfail (~all) or a hard fail (-all), and what each means.
Live TXT records parsed mechanism by mechanism. No signup, the fastest feedback loop in email authentication.

Free online DNS lookup tool. Check A, AAAA, MX, TXT, CNAME, NS and SOA records for any domain instantly. Fast, private, accurate, no sign-up required.
Read article →
Free DNS propagation checker: query 6 global resolvers (Google, Cloudflare, Quad9, OpenDNS) and see instantly whether your DNS changes went live worldwide.
Read article →