SPF Record Checker

What is an SPF record?

SPF (Sender Policy Framework) is a DNS TXT record that lists the servers allowed to send email from your domain. Receivers check the envelope sender against your SPF record — if it doesn't match an authorised host, they can reject, quarantine, or junk the message.

How to read your SPF result

• include: delegates authorisation to another domain (e.g. _spf.google.com).
• ip4 / ip6: raw addresses allowed to send for the domain.
• ~all = softfail, -all = hardfail, ?all = neutral. Hardfail (-all) is strongest.

Common mistakes

• Multiple SPF records on the same domain (must be exactly one).
• More than 10 DNS lookups in the chain — receivers return PermError.
• Missing your ESP's include after switching providers.

Fix it once, monitor forever

Pair SPF with DKIM and a DMARC policy of quarantine or reject for full email authentication. Icemail configures all three when you connect a sending domain.