Free DNS diagnostics

SPF Record Checker

Check whether a domain publishes Sender Policy Framework (SPF) and whether more than one SPF record exists.

About SPF Record Checker

SPF lists which servers may send mail for your domain. It is published as a TXT record starting with v=spf1. Multiple SPF TXT records are invalid and can break authentication — merge mechanisms into one record instead.

SPF works best with DMARC. After checking SPF, review DMARC policy (none, quarantine or reject) to control what receivers do with failures.

Frequently asked questions

What does ~all vs -all mean in SPF?

~all is a soft fail (often treated cautiously); -all is a hard fail. With DMARC, either can be used — policy enforcement is ultimately driven by DMARC p=.

Why is more than one SPF record a problem?

Receivers expect a single SPF policy. Two v=spf1 TXT records make evaluation undefined and often cause authentication to fail.