SPF record checker
Type a domain to read its SPF record, see every service allowed to send email as it, and check it stays within the 10 DNS lookups SPF allows.
- No cost
- No sign-up
- No email
- No Google sign-in
- No subscription
- No limits for normal use
What is SPF?
SPF (Sender Policy Framework) is a TXT record, starting v=spf1, that lists the servers allowed to send email for your domain. Receiving servers check it on every email: mail from a server that isn't listed is marked as suspicious or rejected, which stops others faking your address and keeps your own email out of spam.
What the SPF checker tests
One record only
Two SPF records is a common mistake after adding a new service. It breaks SPF completely, so we flag it first.
The 10-lookup limit
We follow every include down the chain and count the lookups. Over 10 and SPF fails for every email.
How it ends
~all and -all protect you; +all and ?all let anyone send as you. We explain which you have.
Broken includes
An include for a service you've left, or a typo, points at a domain with no SPF record and breaks the whole check.
How to read an SPF record
- include:_spf.google.com allows a service's servers (here Google Workspace). Each include uses at least one lookup.
- ip4: and ip6: allow one address or a range, and cost nothing.
- a and mx allow your website's server and your mail servers.
- ~all at the end means "anything else is probably fake"; -all means "reject anything else".
Too many DNS lookups?
Remove includes for services you no longer use first. Then check whether a service needs an include at all: many marketing tools send from their own domain and only need DKIM. Replacing an include with the ip4: ranges it contains also works, but the ranges can change without warning, so only do it for your own servers.
What it can't tell you
We check the record your domain publishes, not a particular email. To see whether one email passed, open it and look at the Authentication-Results header. SPF alone isn't enough any more: add DKIM and a DMARC policy too.
Frequently asked questions
Is the SPF checker free?
Yes. No sign-up, no email and no subscription, with only a fair-use limit to stop bots.
Can I have two SPF records?
No. A domain must have exactly one record starting v=spf1. Merge them by putting every include and ip4 into one record with one all at the end.
Should I use ~all or -all?
~all is the safe choice while you check every service that sends email for you. Once DMARC reports show nothing legitimate failing, -all is stricter.
Does SPF affect SEO?
No, it only affects email delivery. It matters for your business, though: without it, quotes and invoices are more likely to land in spam.
Related guides
SPF, DKIM and DMARC setup
Step-by-step SPF, DKIM and DMARC setup for Microsoft 365, Google Workspace and other email providers, with the exact records and how to test them free.
Why are my emails going to spam?
Why business emails land in spam: missing SPF, DKIM or DMARC records, a poor sender reputation or spammy content, with free checks and simple fixes.
Gmail, Yahoo and Microsoft sender rules
The sender rules Gmail, Yahoo and Outlook enforce: SPF, DKIM, DMARC, one-click unsubscribe and spam rates, in plain English for small businesses.
More free SEO tools
Free SEO check
Full single-page audit: Google readiness, AI search, speed, security and local SEO.
Website crawler
Crawl up to 10,000 pages and download every title, heading, link and price as Excel or CSV.
AI SEO checker
Can ChatGPT, Claude, Perplexity and Google AI Overviews read and cite your site?
Website audit
Crawl up to 250 pages for broken links, duplicate titles and orphan pages.
Backlink checker
See which websites link to any site – .co.uk, .com or anything else – and which link to your competitor but not you.
Domain authority checker
Authority scores for up to 100 websites at once, with links and global rank.
Redirect checker
Follow any address hop by hop: 301s, 302s, chains, loops and meta refreshes.
HTTP header checker
Every response header for any address, with what each one means for SEO.
Website down checker
Is a website down for everyone or just you? Live status and response time.
Open Graph checker
See how any page looks when shared on Facebook, LinkedIn, WhatsApp and X.
Hreflang checker
Check language and country tags, return links and x-default on any page.
Heading checker
See any page's H1 to H6 outline and fix missing, double or skipped headings.
Alt text checker
Find images with missing, empty or weak alt text, and linked images with no words.
Canonical checker
Find a page's canonical URL, test it loads, and spot noindex tags and headers.
Website hosting checker
Who hosts a website? The hosting company, IP address, CDN and server location.
SSL checker
Is a site secure? Certificate expiry, https redirects, HSTS and mixed content.
UTM link builder
Tracking links for Google Analytics: source, medium and campaign, ready to copy.
URL slug generator
Turn titles into short, clean, SEO-friendly page addresses.
Case converter
Sentence case, Title Case, UPPER, lower, camelCase and more in one click.
Favicon generator
favicon.ico, Apple and Android icons from letters or your logo, with the HTML.
Hreflang generator
Correct hreflang tags for every language and country version, as HTML or a sitemap.
Email header analyzer
Paste email headers to check SPF, DKIM and DMARC, trace the route and spot fakes.
Website technology checker
What is a site built with? CMS, theme, plugins, analytics, hosting and email.
DNS lookup
A, MX, TXT, NS and other records, plus SPF and DMARC email checks.
DNS propagation checker
Has your DNS change spread? Ten public DNS services and your own name server.
Reverse DNS lookup
The hostname (PTR record) of any IP address, and whether it points back.
Meta tag checker
Every meta tag on a live page, with a Google preview and plain fixes.
MX lookup
Which mail servers receive a domain's email, in priority order, and who provides them.
DMARC checker
Look up a DMARC policy tag by tag and see if it stops fake email.
DKIM checker
Find DKIM keys under common selectors or yours, with key size and type.
Domain age checker
How old is a website? Registration and expiry dates for up to 100 domains.
WHOIS lookup
Who a domain is registered with, when it expires and its name servers.
Competitor comparison
Your site against up to two competitors, side by side.
SEO monitoring
A free weekly re-check with a score history graph.
Title tag checker
See your title and description in pixels, exactly as Google cuts them.
robots.txt tester
Paste your rules and test any URL against Googlebot or AI crawlers.
llms.txt generator
Create an llms.txt file that gives AI assistants a map of your site.
Mobile-friendly test
Check your page works on phones – Google's own test closed in 2023.
Broken link checker
Crawl your whole site and find every dead link and broken image.
Schema checker
Validate the structured data on any page or pasted code against Google's rich result rules.
Page speed checker
Core Web Vitals from real Chrome users plus a Lighthouse test.
Sitemap checker
Check your XML sitemap is found, valid and listed in robots.txt.
Security headers checker
HTTPS, HSTS and the headers browsers use to protect visitors.
Local SEO checker
LocalBusiness markup, contact details and map signals for UK businesses.
Meta tag generator
Title, description, canonical, robots and social tags, ready to paste.
Open Graph generator
Control how your link looks on Facebook, LinkedIn, WhatsApp and X.
XML sitemap generator
Find your pages and download a valid sitemap.xml.
robots.txt generator
Block AI training bots while staying visible in AI search.
Local business schema generator
LocalBusiness JSON-LD for Google and AI assistants.
Long-tail keyword generator
Turn one topic into dozens of winnable search phrases.
Blog title generator
Headline ideas measured to fit Google's results.
Word counter
Words, characters, reading time, readability and keyword density.
Keyword difficulty checker
How hard is page one? We grade the pages that rank now.
Plagiarism checker
Find copies of your text across the web – no word limit.
Anchor text checker
Grade every link on a page and generate better anchors.
Local search checker
See Google results as they appear in any UK town.
AI title & description writer
AI reads your page and writes titles and descriptions that fit Google.
Bulk SEO checker
Score up to 20 websites at once and download a CSV.
Redirect map generator
301 rules for .htaccess, Nginx, Cloudflare and more.
SEO ROI calculator
What a better Google position could earn you.
Image compressor
Shrink photos and convert to WebP in your browser – no upload.
QR code generator
QR codes that never expire, as PNG or SVG.
Google review link generator
A one-tap review link, QR code and printable card.
Privacy policy generator
A UK GDPR privacy policy and cookie wording for your site.
Website report
Authority, rank, linking sites, age and hosting for any domain.
SEO score badge
Show your score on your site – it updates itself weekly.
Rank tracker
Track your Google positions for every search, by country, from your own Search Console data.
SEO content editor
Write with a live score, related terms and questions taken from the pages that rank.
Toxic backlink checker
Spot spam links, check your anchor text mix and build a disavow file.
Competitor ad checker
See which ad platforms a competitor uses and open every ad they run.
Uptime monitor
Checks your site every 15 minutes and alerts you the moment it goes down or slows.
Website analytics
Cookie-free visitor stats: live visitors, pages, sources and conversions.
Brand monitoring
Find mentions of your business, unlinked mentions and copied content.
WordPress SEO fixer
A free plugin that fixes missing alt text, descriptions, extra H1s and broken links.
Accessibility checker
Test any page for WCAG problems: alt text, labels, link names, zoom and headings.
Run a free SEO check now
About 50 checks covering Google, AI search, speed, security and local SEO. No sign-up.
Want the fixes done for you? XKey is made by IceWork, a web studio in Blackpool. IceWork builds fast, search-ready websites – a 3-page site including domain and a year's hosting is £350 all in.