Email authentication

Free SPF Checker

Look up, validate and fix your domain’s SPF record in seconds — so your emails reach the inbox instead of spam.

What is an SPF record?

SPF (Sender Policy Framework) is a DNS TXT record that lists which servers are allowed to send email for your domain. When a provider like Gmail or Outlook receives a message, it checks the sending IP against your SPF record. If the IP isn’t authorized, the email can be rejected or filed as spam. SPF is one of the three pillars of email authentication, alongside DKIM and DMARC.

How to use this SPF checker

  1. Type your domain (e.g. yourcompany.com) and run the check.
  2. Read the parsed record: included senders, mechanisms and the final all qualifier.
  3. If something’s missing, add or edit a TXT record in your DNS (host @, value like v=spf1 include:_spf.google.com ~all).
  4. Wait for propagation, then run the check again until it’s clean.

Why SPF matters for deliverability

If you run any email outreach, SPF is non-negotiable. A missing or broken record quietly tanks your deliverability: prospects never see your messages, so reply rates drop no matter how good the copy is. Get SPF, DKIM and DMARC all green before you scale sending.

FAQ

How do I check my SPF record?

Enter your domain above and run the check. The tool reads the published TXT record and flags syntax errors, missing mechanisms or an invalid all qualifier.

What does a valid SPF record look like?

A typical record is v=spf1 include:_spf.google.com ~all. It starts with v=spf1, lists authorized senders, and ends with an all mechanism.

Can I have more than one SPF record?

No. A domain must publish a single SPF TXT record. Two or more records cause a permerror and break authentication — merge them into one.

What’s the difference between ~all and -all?

~all (softfail) tells receivers to accept but flag unauthorized senders; -all (hardfail) tells them to reject. Start with ~all while testing, then tighten to -all.