Free SPF Lookup Tool
Instantly check your domain's SPF records to prevent email spoofing and phishing.
What is an SPF Lookup Tool?
An SPF (Sender Policy Framework) lookup tool is a free diagnostic utility that retrieves and analyzes the SPF records of any domain. SPF records specify which mail servers are authorized to send emails on behalf of your domain, helping prevent email spoofing and phishing attacks. Use this tool to verify your email authentication setup, troubleshoot delivery issues, or audit domain security.
How to Use This SPF Record Checker
- Enter the domain:
Type any domain name (like
google.comorgithub.com) without www or http:// - Click 'Check SPF Record': Our tool instantly queries DNS servers worldwide to fetch current SPF records and analyze their components
- Review the results:
- Raw SPF Record: The complete SPF policy as stored in DNS
- Record Details: Breakdown of each SPF mechanism (include, ip4, ip6, etc.)
- Validation Tests: Automated checks for common SPF configuration issues
- Security Analysis: Assessment of policy strictness and potential vulnerabilities
Frequently Asked Questions
What is SPF and why is it crucial for email security?
SPF (Sender Policy Framework) is an email authentication protocol that prevents unauthorized senders from using your domain name. When configured properly, SPF tells receiving mail servers which IP addresses and mail servers are allowed to send emails for your domain. This helps prevent domain spoofing, reduces spam, and protects your domain's reputation.
What do the different SPF mechanisms mean?
Common SPF mechanisms include: include: references another domain's SPF record (like Google Workspace), ip4/ip6: specifies authorized IP addresses, a/mx: allows servers from A or MX records, and -all/~all: defines what happens to emails from unauthorized sources (~all = softfail, -all = hardfail).
How do I fix "SPF record not found" errors?
Log into your domain's DNS management panel (through your registrar or DNS provider) and add a new TXT record.
Start with a basic SPF record like v=spf1 include:_spf.google.com ~all
(for Google Workspace) or consult your email provider's documentation for the correct SPF record format.
What's the difference between ~all and -all in SPF records?
~all (softfail) suggests that emails from unauthorized sources should be marked as suspicious but still delivered. -all (hardfail) instructs receiving servers to reject emails from unauthorized sources entirely. Most domains use ~all to avoid accidentally blocking legitimate emails during the initial SPF setup phase.
Send Personalized Emails with Gmail
BetterMerge is a mail merge tool that works seamlessly with Gmail and Google Sheets for sending personalized emails.