SPF Record Checker
Check whether a domain publishes a valid SPF record and enforces it.
About this check
SPF (Sender Policy Framework) is a DNS TXT record that lists which mail servers are allowed to send email for a domain. Receiving servers use it to detect forged senders. Without SPF, attackers can more easily spoof your domain in phishing campaigns.
A strong SPF record ends in "-all" (hard fail) or "~all" (soft fail). A missing SPF record, or one ending in "+all", offers little protection. SPF works best combined with DKIM and an enforcing DMARC policy.
Frequently asked questions
What is a good SPF record?
One that lists your authorized senders and ends in -all (or ~all), keeping the total DNS lookups within the SPF limit of 10.
Is SPF enough on its own?
No. SPF should be paired with DKIM signing and an enforcing DMARC policy (quarantine or reject).
Want the full picture?
Get a complete security report with an exposure score across email, DNS, TLS, exposure and breach metadata.
Run a full report All tools