Free SPF Record Checker
Check whether your domain publishes an SPF record, in about thirty seconds. It runs as part of a free, passive snapshot of your whole external surface.
What SPF is
SPF (Sender Policy Framework) is a DNS record that lists which servers are allowed to send email for your domain. Receiving mail servers use it to help tell your real mail from mail that only claims to be yours. It is one of the three pieces of email authentication, alongside DKIM and DMARC.
Why it matters
Without an SPF record, receiving servers have no published list of who may send as you, which makes spoofing your domain easier and can hurt the deliverability of your own email. An SPF record is quick to publish and is the foundation the rest of your email authentication builds on.
How to read your result
The check looks up the TXT records at your organisational domain and reports whether a valid SPF record (starting v=spf1) is present. A missing SPF record is flagged as a gap to close; a present one passes. It does not judge how strict your policy is, only that a record exists.
How to fix it
Publish a single SPF TXT record listing your legitimate senders, for example v=spf1 include:_spf.google.com -all for Google Workspace. Use -all (fail) or ~all (soft fail) at the end, and keep the record within the ten-lookup limit so it does not silently break.
See your whole external surface
This is one of the checks in Secvura’s free Surface Check. The same passive snapshot also covers your TLS certificate, cookies, the rest of your email security, and more, each scored by severity and fix effort, with an A-to-F Surface Score.
Run the full Surface Check →Frequently asked
Is the SPF check free?
Yes, completely free and with no sign-up. You also get your DMARC, DKIM and the rest of your external surface in the same snapshot.
Can I have more than one SPF record?
No. A domain should publish exactly one SPF record. Multiple SPF records are invalid and cause authentication to fail, so combine your senders into a single record.
What does the ten-lookup limit mean?
SPF allows at most ten DNS lookups when it is evaluated. Going over that limit makes SPF return a permanent error, which can undermine your DMARC. Keep includes lean to stay under it.
More free checks