Retrieve SPF TXT records, spot duplicate policies and inspect the top-level mechanisms in your domain’s sending authorization.
SPF is published as a TXT record beginning with v=spf1. The checker separates records correctly and highlights multiple SPF policies at the same name.
Multiple TXT records are normal, but multiple v=spf1 policies at the same DNS name cause an SPF permanent error. Combine authorized senders in a single reviewed policy.
SPF evaluation limits DNS-lookup-causing terms to ten, including nested evaluations. The displayed top-level term count is not a complete recursive or sender-specific evaluation.
~all is soft fail, -all is fail and ?all is neutral. These apply when earlier mechanisms do not match. Changing an ending without auditing senders can disrupt legitimate mail.
No. It retrieves the published policy and counts top-level lookup-causing terms. Recursive paths, macros and sender-IP evaluation are not validated.
SPF authenticates the envelope sender or HELO identity. DMARC evaluates alignment with the visible From domain.