Free tool
SPF checker
Check basic SPF publication and catch two common errors: no record or multiple records at the same name.
Check domain
What it checks
Single record
SPF requires one `v=spf1` policy per name.
Mechanisms
Counts direct terms that can trigger DNS lookups.
Explanation
Shows why complete validation still needs recursive includes and real-message testing.
How to interpret the limits
The displayed count does not expand `include` trees.
It does not confirm whether a specific IP is authorized.
It does not evaluate DMARC alignment of Return-Path.
Safe use and privacy
Enter only public domains you are authorized to review. Queries are not stored; private IPs, localhost, reserved ranges, and mixed destinations are blocked. Results are point-in-time public metadata.
Frequently asked questions
Is the queried domain stored?
No. The tool processes the lookup to respond and does not persist the domain or result.
Can I check an IP or internal service?
No. Only public domains are accepted; direct IPs and private, local, or reserved destinations are blocked.
Move from a check to monitoring
A spot check helps diagnosis. Monitoring keeps history and warns you when evidence changes.
Explore modulesRelated content
Domain trust
DNS and email security monitoring
Detect DNS record changes and monitor SPF, DKIM, DMARC, MX, nameserver, MTA-STS, and TLS-RPT posture across your domains.
Technical guide
How to check SPF, DKIM, and DMARC correctly
Check SPF, DKIM, and DMARC syntax and alignment, understand common errors, and learn why a single pass does not guarantee protection.
Email authentication
DMARC monitoring and RUA report analysis
Receive and analyze DMARC RUA reports, identify sending sources, and track SPF/DKIM alignment before tightening domain policy.