drwho.me
Runs in your browser

SPF checker

Find and read a domain's SPF record.

The lookup goes from your browser straight to a public service. We never see the domain.

What this checks

SPF is a DNS record that lists the servers allowed to send mail for a domain. This tool reads the domain's TXT records, keeps the one that starts with v=spf1, and splits it into its parts.

What to look for

The record should end in -all or ~all. A record that ends in +all allows anyone to send as you. A domain must have exactly one SPF record. Two records make SPF fail for every message.

Receivers stop after 10 DNS lookups. Each include, a, mx, exists and redirect costs one, and an included record's own lookups count too.

Records that look right but are ignored

A record with a hidden character in front of v=spf1, often left behind by a copy and paste, is thrown away by receivers. This tool lists those records separately, because the owner usually believes they are working.