What it reads
The TXT records at your domain. One v=spf1 record with -all passes, ~all warns, any other all term or none fails, and more than one record fails. The all term counts wherever it sits, and a redirect is followed to find it.
Check 1 of 54 · Email authentication
SPF record, explained.
The list of servers allowed to send email as you: that it exists, that there is only one, and that it tells receivers to refuse everyone else.
Engine 1.57.0, read 25 October 2026
Free checkScoredReliability: Definitive
Can someone send email as you?
What the check does, and where it stops.
Why it matters
Without SPF, a receiving server has no list to check a sender against. With a soft ~all it has the list, but only marks other senders as suspect. Two SPF records cancel each other out.
What a failure looks like
A failure is a finding in your result. The check is scored, so it can lower your score, and the Full Report gives every finding its severity and a fix. If the check cannot finish, it is recorded as unknown: it carries no penalty, and it is never a pass.
Where its limits are
None once the DNS lookup completes.
ReliabilityDefinitive: reads a published value
Check 1 is one of 16 in Email authentication. See it in its row on the scanner page, beside the rest of Email authentication.
Run this check on any domain. Free, with no account.
The SPF checker runs it on its own. It reads the record that lists the servers allowed to send email as you, and counts the DNS lookups it costs.
See how your domain does.
The free check includes this one and takes about 30 seconds. No account. Nothing to install.