AK
appkiro.comFind SPF TXT records and review which senders are authorized for a domain.
SPF Checker looks through a domain's TXT records and highlights whether an SPF policy is present. It is a practical first step when outgoing mail lands in spam, fails authentication, or starts failing after adding a new sending service.
Use the domain that appears in the email address, such as example.com from [email protected]. The tool fetches TXT records and looks for values beginning with v=spf1.
A normal SPF record lists approved senders using include, ip4, ip6, a, mx, or similar mechanisms. The final qualifier tells receivers what to do when a sender is not listed.
A domain should publish one SPF record. If you find two separate TXT records that both start with v=spf1, many receivers treat the policy as invalid. Merge the mechanisms into a single SPF record instead.
CLI equivalent
dig example.com TXTNetwork checks run from the app server, so results reflect what is reachable from that public environment. Localhost, private IPs, and internal-only targets are blocked.
SPF is an email authentication policy that says which servers are allowed to send mail for a domain.
No. SPF helps, but good email authentication usually also needs DKIM and DMARC.
-all is a hard fail for unauthorized senders. ~all is a soft fail, which is common while a domain is still being tested.
Receivers expect a single SPF policy. Multiple v=spf1 TXT records can cause SPF evaluation to fail.