SPF record checker
Find the SPF TXT record for a domain and explain the published policy. A valid record does not mean a message will be accepted.
This one uses a server lookup because the job cannot finish on the device alone.
How to use it
- 1Enter the domain that sends mail.
- 2Choose Check.
- 3Read the published record and any problems, such as more than one SPF record or +all.
- 4Copy the result to compare it with the record you intended to publish.
When it helps
- Confirm an SPF record is visible after a DNS change.
- Spot +all or a second SPF record before mail starts failing.
- See which other domains an include: mechanism names.
Good to know
- This does not send mail and does not say that a particular server is authorized to send a particular message.
- Included domains are followed only until ten lookups.
- A public resolver cannot see a private TXT record.
- Delivery also depends on DKIM, DMARC, and the receiving server.
Questions
Does a clean SPF record mean mail will arrive?
No. SPF is one check a receiver may use. It does not prove the mailbox exists or that the message will be accepted.
What is wrong with +all?
It tells receivers that any server may send mail for the domain. Most domains want -all or ~all instead.
Related tools
MX record checker MX record checker
See the mail servers a domain publishes. This does not prove a mailbox exists.
Email
DMARC record checker DMARC record checker
Read the DMARC policy at _dmarc. This does not prove mail will be delivered.
Email
DNS lookup DNS lookup
Look up public DNS records for a domain. Kiln does not connect to the host.
Network