ciatto tools
Email

Free SPF Record Checker

Find a domain's SPF record, detect multiple policies, count direct DNS-lookup terms and inspect the all mechanism.

Your input is processed only as required by this tool.

About this tool

Free SPF Record Checker

SPF lets a domain publish which infrastructure is authorized to send mail on its behalf. This checker finds records beginning with v=spf1, detects invalid multiple SPF records, counts direct DNS-consuming mechanisms and shows the final all mechanism when present.

How to use it

How to use it

  1. Enter the public domain you want to inspect.
  2. Run the DNS check and review the published email configuration returned by the authoritative DNS path.
  3. Use the findings together with the related SPF, DKIM, DMARC and MX checks before changing production email DNS.
How to read the result

How to read the result

A single SPF record is expected. Mechanisms such as include, a, mx, ptr, exists and redirect can consume DNS lookups; SPF evaluation has a lookup limit, so complex policies should be reviewed carefully.

Limitations

Limitations

The DNS-term count is a direct estimate and does not recursively expand every include or redirect target. Full SPF evaluation also depends on the sending IP, envelope sender and recursive policy graph.

FAQ

Frequently asked questions

Can a domain have two SPF records?

Publishing multiple SPF TXT records for the same identity is invalid and can cause SPF evaluation to fail.

Does this checker expand every include?

No. It reports direct DNS-lookup terms; recursive expansion is intentionally not represented as a complete SPF evaluation.