Email Authentication

SPF Record Checker

Validate SPF record syntax, understand SPF mechanisms, and check your domain's SPF configuration for proper email authentication.

Opens Google DNS to look up TXT records for the domain

Common SPF Record Examples

Allow only MX servers

v=spf1 mx -all

Allow Google Workspace

v=spf1 include:_spf.google.com ~all

Allow Microsoft 365

v=spf1 include:spf.protection.outlook.com -all

Allow specific IP

v=spf1 ip4:192.168.1.1 -all

Allow multiple providers

v=spf1 include:_spf.google.com include:sendgrid.net ~all

Allow subnet

v=spf1 ip4:192.168.0.0/24 -all

How It Works

How to Use SPF Record Checker

1

Enter your domain

Type your domain name into the lookup field or paste an SPF record for syntax validation.

2

Lookup DNS records

Click Lookup DNS to query Google DNS for your domain TXT records, or validate SPF syntax directly.

3

Validate SPF record

Get a detailed breakdown of SPF mechanisms, DNS lookup count, and any syntax issues found.

Features

Why Use SPF Record Checker

SPF Syntax Parsing

Breaks down every SPF mechanism and qualifier with human-readable explanations of what each does.

DNS Record Lookup

Queries Google DNS to retrieve TXT records for any domain so you can inspect the live SPF record.

Syntax Validation

Validates SPF record structure, checks for common errors, and verifies the all mechanism is present.

Include Expansion

Tracks include mechanisms and counts total DNS lookups against the 10-lookup SPF limit.

Error Detection

Identifies dangerous configurations like +all, missing version tags, and exceeding character limits.

100% Private

SPF validation runs locally in your browser. DNS lookups use Google public DNS with no data stored.

Use cases

Who Uses SPF Record Checker

Domain Admins

Validate SPF records after creating or modifying them to ensure proper syntax before publishing to DNS.

Email Marketers

Verify that your sending domain SPF includes all authorized email service providers like SendGrid or Mailchimp.

IT Security Teams

Audit domain SPF records to prevent email spoofing and ensure alignment with DMARC policies.

Developers

Debug email delivery issues by checking if SPF records correctly authorize your application sending IPs.

Need More Power?

Sign up for a free Tomba account to unlock bulk processing, API access, CRM integrations, and 75 free searches per month.

Have a Question?

SPF Record Checker

If you can't find the answer to your question here, visit the dedicated section in our Help Center .

SPF Mechanisms Reference

MechanismDescription
v=spf1SPF version identifier (required, must be first)
ip4:Allow a specific IPv4 address or range
ip6:Allow a specific IPv6 address or range
aAllow the domain's A record IP
mxAllow the domain's MX record IPs
include:Include another domain's SPF policy
allMatch all (used with qualifier at the end)
+Pass qualifier (default, allow)
-Fail qualifier (hard fail, reject)
~SoftFail qualifier (accept but mark)
?Neutral qualifier (no policy)

Start finding verified emails today

Join 150,000+ professionals who trust Tomba for accurate contact data. No credit card required.