Skip to content
Kordu Tools

SPF Record Checker

Look up and validate SPF records to check email authentication for any domain.

How to use

  1. 1

    Enter a domain

    Type the domain you want to check, such as example.com.

  2. 2

    Run the check

    Click the Check SPF button or press Enter to query TXT records and find the SPF record.

  3. 3

    Review mechanisms

    See each SPF mechanism with its qualifier (pass, fail, soft fail, or neutral) in a clear table.

  4. 4

    Check for warnings

    Review any validation warnings about missing records, dangerous settings, or lookup limits.

Frequently asked questions

What is an SPF record?
SPF (Sender Policy Framework) is a DNS TXT record that specifies which servers are authorised to send email on behalf of a domain. Receiving servers check SPF to help detect forged sender addresses.
What does -all vs ~all mean?
-all (hard fail) tells receivers to reject email from unauthorised servers. ~all (soft fail) marks it as suspicious but still delivers. -all is recommended for stronger protection.
Why is +all dangerous?
+all means any server in the world is authorised to send email as your domain. This effectively disables SPF and allows unrestricted spoofing.
What is the 10-lookup limit?
SPF allows a maximum of 10 DNS lookups during evaluation. Each include, a, mx, ptr, exists, and redirect mechanism triggers a lookup. Exceeding the limit causes a permanent error (permerror) and SPF fails.

Check whether a domain has a valid SPF (Sender Policy Framework) record

and understand what it allows. This tool queries the domain's TXT records

via Cloudflare's DNS-over-HTTPS API, finds the SPF record, and parses

every mechanism — including ip4, ip6, include, a, mx, and the all

directive. Each mechanism is shown with its qualifier (+, -, ~, ?).

Validation warnings highlight common problems: missing SPF records,

multiple conflicting records, the dangerous +all directive, exceeding

the 10-lookup limit, and overly long records. All checks run entirely

in your browser.

Related tools

DNS Lookup

Query all DNS record types for any domain using Cloudflare's DNS-over-HTTPS API.

MX Lookup

Look up mail server (MX) records for a domain and identify the email provider.