SPF Record Checks: How to Check SPF Records and Why You Should
An SPF record check helps you reduce the risk of spoofing, lost email messages, and reputation problems. Several organisations offer SPF checker tools, and most are free.
The SPF (or sender policy framework) is a method companies use to publish a list of authorised IP addresses that can send email.
During an SPF test, you will:
- Look up. Do you have an SPF record associated with your domain?
- Test. Are there errors that keep email from hitting inboxes?
- Learn. Are you following best practices regarding record setup and execution?
Most business owners consider SPF record checks vital communication tools. If you talk with customers or prospects via email, you want your notes to hit valid inboxes and not spam filters.
But these tests can reduce crime too. For example, a company in New Hampshire was hit with two spoofing attacks in one year and paid more than $2 million to thieves. Spoofing made that possible. The more you run SPF record checks, the harder you make a criminal's job.
What records can you validate with an SPF check?
Many companies offer free SPF record checks. Each one works differently. Before you choose one, look over what it can do and how it works.
For example, Dmarc Analyser has an SPF checker tool. It analyses:
- SPF record existence. Do you have an SPF record?
- Multiple SPF records in DNS. Do you have multiple SPF records? That's not allowed.
- PTR mechanism used. Are you using PTR? That's an old format, and it could keep your email from getting through.
- Unknown parts found. Are you using unauthorised code not found in the SPF specification?
- All mechanisms used. Are you using the mechanism "all" with a