How do I use the SPF Record Checker tool on Valid Email Checker?

Last updated May 19, 2026Free tools

The SPF Record Checker is one of the free DNS utilities Valid Email Checker publishes alongside the verification engine. It reads the SPF TXT record currently published for your domain and tells you whether it is valid, what mechanisms it authorizes, and what failure policy you have set. There is no signup, no card, no quota — type a domain and you get an answer.

Step by step

  1. Open /spf-record-checker from the free tools menu on validemailchecker.com.
  2. Type your domain into the single input field. Bare domain only — example.com, not mail.example.com or https://example.com. The tool strips www. and protocol prefixes automatically, but the lookup runs on the apex.
  3. Click Check SPF Record.
  4. Within a second the result panel appears below the form with the raw TXT record, a parsed list of authorized senders, and the failure policy color-coded for severity.

What you see in the result

The result is broken into three sections. The first shows the full raw record exactly as it lives in DNS, with a copy button so you can paste it into a ticket or a config file. The second parses each mechanism into a row — include:_spf.google.com, ip4:198.51.100.5, a, mx, and so on — so you can see at a glance which senders are authorized. The third highlights the failure policy: -all (Fail) in green, ~all (SoftFail) in amber, ?all or +all in gray and red. If no SPF record is found at all, the result panel says so plainly and links you to the SPF Record Generator to publish one.

When to use it

  • After you publish a new SPF record, to confirm DNS has propagated and the record is visible.
  • Before launching a sending campaign, as a sanity check that the record still resolves and includes every ESP you actually send through.
  • When you swap email providers, to make sure the new provider is in the record and the old one is removed.
  • As a first step when emails are landing in spam — a missing or broken SPF record is one of the more common causes.
Check the policy too
A record that exists but ends in ?all or +all is barely better than no record at all. The checker flags this so you can tighten the policy to -all (or at least ~all) once you are confident the include list is complete.

If the checker reports a problem you cannot fix from the UI, generate a fresh record with the SPF generator and overwrite the broken one at your DNS provider. The pair of tools is designed to flow into each other — check, generate, publish, check again.