Check SPF policy
Enter a domain and review whether it publishes one SPF record and which mechanisms it uses.
Input
example.com
Output
SPF status, record, mechanisms, and notes
Network, IP, DNS, And Security Tools
SPF Record Checker
Check SPF TXT records for a domain through Convurter's server-side DNS resolver.
Waiting
Uses Convurter servers for lookup or processing. Do not enter secrets.
Input
SPF Record Checker. This lookup uses public network records and responses. Do not enter secrets or private URLs.
Enter a public domain to run this lookup.
Guide
How to use SPF Record Checker
Step-by-step
- Enter domain for a bounded Convurter server lookup.
- Run the inspection lookup and review the point-in-time response.
- Review the spf-report result, then copy or download it if the workbench offers that action.
- Use the related tools on this page for cleanup, validation, conversion, or the next step in the workflow.
Questions
Is SPF Record Checker free to use?
Yes. The public lookup is free to use with bounded rate limits.
Are my files uploaded?
No files are uploaded, but the entered lookup target is sent to Convurter servers to fetch the public response. Do not enter secrets.
What should I check before using the spf-report result?
SPF data comes from TXT records on the domain. Review the final output before using it in production work.
What can I do after this?
Good next steps include DMARC Checker, MX Lookup, and DNS Lookup.
Workflow fit
Use SPF Record Checker in the right place
If you are unsure, use the related tools and family hub to choose the closest workflow before committing to an output.
Best for
- Point-in-time network, DNS, HTTP, email DNS, SSL, redirect, IP, or password checks that need a quick operational signal.
- Support tickets, implementation QA, and configuration review before deeper security testing.
- A focused inspect task where the expected output is spf-report.
Before you start
- This tool runs in the browser, so keep the tab open until the result is created and downloaded or copied.
- Use domains, public hosts, and values you are authorized to inspect.
- Avoid pasting private keys, production secrets, or credentials into lookup-style tools.
- Network answers can differ by resolver, cache, region, and timing.
- Use the report as a decision aid, then route to cleanup, conversion, or verification tools if it finds something notable.
Quality checks
- Treat inspection output as a signal report, not as a guarantee that every possible issue was checked.
- Treat results as a point-in-time signal, not a complete security audit.
- Recheck after DNS, certificate, redirect, or header changes have propagated.
- Escalate critical production security questions to a full security review.
- Copy or download the result only after confirming the displayed output matches the task you intended.
Common mistakes
- Assuming one successful lookup proves every region or client sees the same result.
- Treating a header, SSL, or DNS report as proof that the entire application is secure.
- Ignoring caching and propagation windows after configuration changes.
- Skipping input review because the tool feels instant.
- Treating the first result as final without checking the destination requirement.
Continue the workflow
Use these when the current result is only one step in a longer task.
Verify or clean up
Use these when the output needs checking, cleanup, comparison, compression, or a final share-ready pass.
Execution depth
Finish the job with fewer retries
Use these checks when the result will be emailed, uploaded, published, imported, or used as a final handoff copy.
Good uses
- Check whether a domain publishes one SPF record.
- Review mechanisms and provider includes before sender setup changes.
Bad inputs
- Expecting a full receiving-mail-server simulation.
- Using SPF alone as proof that all mail is authenticated.
- Ignoring DKIM and DMARC alignment.
Output checklist
- Confirm there is exactly one SPF record.
- Review include, redirect, ip4, ip6, and all mechanisms.
- Compare the policy against the senders that actually use the domain.
Failure modes
- External include records can change outside your domain.
- Multiple SPF records need cleanup.
- A syntactically readable record can still fail provider-specific alignment.
Runtime limits
- Server lookup.
- TXT/SPF record parsing only.
- Not a full email deliverability audit.