SPF Checker
Look up SPF records (TXT starting with v=spf1) for a hostname.
Lookup
Results
Copy to ClipboardTXT / SPF
Run a lookup to see results here.
SPF Checker FAQs
Common questions about SPF records and email authentication.
What is an SPF record?
SPF (Sender Policy Framework) is a DNS-based email authentication method. A domain publishes an SPF policy (usually in a TXT record starting with v=spf1) listing which servers are allowed to send email for that domain.
Why is SPF important?
SPF helps receiving mail servers detect spoofed email (forged sender domains). Combined with DKIM and DMARC, it improves deliverability and reduces phishing and spam impersonation.
What do include:, ip4:, ip6:, a, mx mean?
They are SPF mechanisms. include: pulls in another domain’s SPF policy, ip4:/ip6: authorize specific IP ranges, and a/mx authorize the IPs from a domain’s A/AAAA or MX records. The final qualifier (like -all or ~all) sets the default behavior.
What is the difference between -all, ~all, and ?all?
-all is a hard fail (only listed senders are allowed). ~all is a soft fail (not authorized, but may be accepted with suspicion). ?all is neutral (no clear assertion). Most domains aiming for strict protection use -all once validated.
Why is having multiple SPF records a problem?
A domain should publish only one SPF policy. Multiple separate TXT records starting with v=spf1 can cause SPF “PermError”, leading to authentication failures and deliverability issues.