ToolSci.com

🛡️ SPF Record Checker

Check if a domain has a valid Sender Policy Framework (SPF) record.

ℹ️ About SPF Record Checker

The SPF Record Checker is a security utility that verifies a domain's Sender Policy Framework (SPF) configuration. SPF is an email authentication method that specifies which mail servers (IP addresses or hostnames) are authorized to send email on behalf of your domain. It is one of the three core pillars of email security, alongside DKIM and DMARC.

By publishing an SPF record in your DNS, you help prevent email spoofing and phishing. When a mail server receives an email from your domain, it checks the SPF record to see if the sending server is on the 'approved' list. If it isn't, the email may be flagged as spam or rejected entirely. This tool parses your DNS TXT records to extract and display your current SPF policy, allowing you to verify that all your legitimate sending services are correctly authorized.

📖 How to use SPF Record Checker

  1. 1. Enter your domain name in the input field.
  2. 2. Click 'Run Tool' to scan the domain's DNS records.
  3. 3. Review the returned 'SPF Record' string.
  4. 4. Ensure that all your authorized IP addresses and third-party includes (like <code>include:_spf.google.com</code>) are present.

Frequently Asked Questions

What is the '~all' at the end of an SPF record?

The <code>~all</code> tag indicates a 'Soft Fail.' It tells receiving servers that if the email doesn't match the SPF list, it should be accepted but flagged as suspicious. A <code>-all</code> (Hard Fail) suggests the email should be rejected.

Can I have more than one SPF record?

No. Having multiple SPF records on a single domain is a configuration error and will cause authentication to fail. You must combine all your authorized sources into one record.

Does SPF alone prevent all spoofing?

No. SPF only checks the 'Return-Path' address. To fully protect your 'From' header, you must also implement DKIM and DMARC.

🔗 Related Email Tools