SPF Record Checker
Check pasted SPF text locally
Your check will appear here.
What this check covers
The browser-only checker inspects a limited subset of pasted SPF text: the version marker, repeated policies, obvious IPv4 errors and top-level DNS-causing terms. Unsupported syntax is reported as not verified. It never queries DNS, expands nested includes, fully validates SPF syntax or proves that an IP address will pass.
How to investigate a failure
- Inspect a failed message's Authentication-Results header.
- Identify the envelope-from domain evaluated for SPF.
- Confirm the actual sending service is authorised by that domain's single SPF record.
- Count lookups after expanding includes and redirects.
- Retest using a message sent to an independent receiving system.
A syntactically tidy record can still be wrong if it omits a sender or includes an obsolete third party.
Authoritative references
Read the underlying standards and provider instructions before changing production DNS: RFC 7208 (SPF), RFC 9989 (DMARC), Google Workspace SPF guidance and your sending provider's current DKIM documentation.
Publish carefully
Always verify generated records against your email provider's official documentation. Never paste private DKIM keys, DNS passwords or API tokens into a public tool.
Editorial responsibility
Published by Acerville Sparks Limited. Software assists research, drafting and automated record testing. Internet standards, provider documentation, reproducible checks and limitations are shown so readers can inspect the work. No independent deliverability consultant review is claimed. Reviewed 4 September 2026.
What this site does not do
No inbox guarantee. No live DNS checks. No storage of entered data. No passwords or private keys requested.