Free tool

Check a domain's SPF record

Look up any domain's SPF record and validate it instantly, then get a full free website scan covering email security, SSL, DNS and more.

Passive, read-only check. Private & internal addresses are blocked.
Quick answer

What does an SPF checker do?

An SPF checker looks up a domain's SPF TXT record and reports which servers are authorised to send mail for it, plus common problems like a missing record, too many DNS lookups or a permissive +all. SiteGuard Monitor's checker shows SPF alongside DMARC, SSL, DNS, uptime and security headers in one explainable risk score.

A broken or missing SPF record hurts email deliverability and makes a domain easier to spoof. This free SPF checker shows the published record and flags the issues that quietly send legitimate mail to spam.

Where SPF goes wrong

SPF is easy to get subtly wrong: more than ten DNS lookups, multiple records, a leftover +all or a missing include for a new mail provider. Any of these can break authentication without an obvious error, so messages just start landing in spam.

  • Exceeding the 10 DNS-lookup limit breaks SPF entirely
  • Two SPF records on one domain is invalid
  • A trailing +all authorises the whole internet to send as you

What this SPF checker reports

  • Whether an SPF record exists and is unique
  • The authorised senders and includes
  • The all mechanism (-all, ~all or the risky +all)
  • Lookup-count and syntax warnings in plain language

Check SPF and DMARC together

SPF only does its job when paired with DMARC. This tool runs a full free scan, so you also see the DMARC policy, SSL certificate, DNS records, uptime and security headers — combined into one 0-100 risk score that prioritises what to fix.

Keep email authentication healthy over time

Mail providers change, includes get added and records drift. Add a domain to SiteGuard Monitor and you'll get an alert the moment SPF changes, with the status captured in every branded client report.

  • Continuous monitoring of SPF and DMARC records
  • Instant email and Discord alerts on changes
  • Email-security health shown in monthly reports

Passive, read-only lookups

An SPF check is a read-only public DNS lookup — the same thing a receiving mail server does. SiteGuard sends no email and changes nothing on your domain.

Frequently asked questions

Is this SPF checker free?
Yes. You can validate any domain's SPF record for free with no account. A free SiteGuard account adds continuous monitoring and alerts when the record changes.
Why is my SPF record failing?
The most common causes are exceeding the 10 DNS-lookup limit, having two SPF records on one domain, or a syntax error in an include. The checker flags these so you know exactly what to correct.
What does -all versus ~all mean?
-all (hard fail) tells receivers to reject mail from unlisted servers, while ~all (soft fail) marks it as suspicious but usually still accepts it. -all is stronger once you're confident every legitimate sender is included.
Do I still need DMARC if I have SPF?
Yes. SPF alone doesn't tell receivers what to do with failing mail or protect the visible From address. DMARC builds on SPF and DKIM to enforce a policy and provide reporting.
Does checking SPF send email or change anything?
No. It's a read-only DNS lookup of your published record. No mail is sent and nothing on your domain is modified.
Can SiteGuard warn me if SPF breaks?
Yes. Add the domain to monitoring and any change to the SPF record triggers an email and Discord alert, and appears in your monthly client report.

More free checks

Turn this one-off check into 24/7 monitoring

Get alerted the moment something changes — and send your clients branded monthly reports automatically.