FREE · SPF · NO SIGN-UP

SPF record checker.

Enter a domain to read its SPF record and spot the mistakes that send mail to spam: no record, more than one record, or a policy that allows any sender. DMARC, mail servers and the registration expiry date are shown alongside.

Check a domain

What SPF does

An SPF record is a TXT record that starts with v=spf1 and lists the servers allowed to send email for the domain. Receiving servers compare the sending server against that list.

Mistakes the checker flags

No record. Receivers have less reason to trust the mail, and DMARC cannot align on SPF.
More than one record. The standard allows exactly one; with two, receivers treat SPF as a permanent error and may ignore it. Merge them into one record.
+all or a bare all. This allows any server in the world to send as the domain.

Ending the record

-all rejects unlisted senders, ~all marks them as suspicious. Either is fine once every service that sends for you (your mail provider, newsletter tool, help desk) is included.

Plain hostnames

A hostname that does not receive or send mail, such as app.example.com, does not need its own SPF record, so the checker only flags a missing record for domains with nameservers or mail servers.

Know when it changes

Adding a new email tool often means editing SPF, and it is easy to break. Domain Watch re-checks SPF, DMARC and nameservers every day and emails you when they change.

Prefer the command line or CI? The same check is available as an open-source CLI (MIT, no dependencies) that can fail a build when a domain is about to expire or loses its DMARC policy.