snag.page

Every check ยท Email

SPF

email/spf

What it checks

The SPF record: just one, ending in ~all or -all.

Why it matters

SPF says which servers may send email from the domain, so others can't send it as you.

How to fix it

  1. List the servers that send your email in one TXT record starting v=spf1, with the include your email provider gives you.
  2. End it with ~all while you check nothing is missing, then -all.
  3. A domain that sends no email should publish v=spf1 -all.
TXT record at example.com
v=spf1 include:_spf.example.net -all

Check a site for this and everything else: snag.page. More on email: SPF lookups DMARC MTA-STS TLS reporting Mail servers DKIM