TXT / SPF Viewer
Read a domain’s SPF record and see which servers may send its mail.
How this lookup works
SPF is published as a TXT record beginning with "v=spf1". It lists the servers allowed to send mail for the domain, and ends with a rule for what to do about everyone else. This tool retrieves the TXT records so you can read the policy.
What the results mean
- v=spf1
- The start of an SPF record. A domain should have exactly one; two SPF records is a misconfiguration that causes both to be ignored.
- -all
- A hard fail: mail from any server not listed should be rejected. "~all" is a soft fail (accept but mark), and "?all" is neutral.
- include:
- Delegates part of the policy to another domain’s SPF, which is how you authorise a provider like Google or a mailing service to send for you.
Frequently asked questions
Why does my SPF record have several "include" entries?
Each authorises a different service to send mail as your domain — your email host, your marketing platform, your support desk. Each include, though, counts toward SPF’s ten-lookup limit, which is easy to exceed.
Should I use -all or ~all?
Once you are confident every legitimate sender is listed, -all (hard fail) gives the strongest protection. Until then ~all (soft fail) avoids silently losing mail from a sender you forgot. Move to -all when your DMARC reports show no surprises.