A hard fail for senders that did not match an earlier mechanism.
Email authentication
SPF checker
Find the SPF record published for a domain and break the policy into readable mechanisms.
Quick guide
Reading an SPF record
SPF is a TXT policy that tells receiving mail servers which systems are allowed to send mail for a domain. The policy starts with v=spf1 and then evaluates mechanisms from left to right.
SPF can reference other DNS records through include, a, mx, exists and redirect. Mail receivers limit the number of DNS-triggering SPF lookups, so very complex records can fail even when the syntax looks reasonable.
A soft fail. Unmatched senders are not authorised, but receivers may treat them less strictly.
Imports another domain SPF policy and can add extra DNS lookups.
IPGetter finds the domain SPF TXT record, separates its mechanisms and modifiers, and highlights the final all policy such as -all or ~all.
- Checking which systems may send for a domain
- Reviewing a new SPF change
- Understanding why SPF may pass or fail
Terminal shortcut
Prefer the command line?
Inspect the published SPF sender policy.
> spf example.com
Run in Terminal ->