SPF record checker
Validate your SPF record, follow every include and count DNS lookups against the limit of 10, so mail from your new server is not rejected.
What this tool checks
DNSPeek reads the TXT records of the domain, finds the record that starts with v=spf1, checks its syntax and follows every include and redirect the way a receiving mail server does. It counts the DNS lookups, flags lookups that return nothing and reports loops. Includes that use macros are counted but not expanded, because only a receiver knows the values.
How to read the result
The counter shows lookups used out of 10. Above 10, SPF fails for every message. The table lists each term and what happens to mail that matches it; the include tree shows where the lookups come from. The final all decides what happens to mail from any other server.
What to check after a migration
List every service that sends mail as your domain: your mail provider, the web server, newsletters, a help desk. Then check the policy receivers apply when SPF fails with the DMARC checker, and the mail servers with the MX lookup.
Frequently asked questions
What does SPF do?
SPF (Sender Policy Framework) is a TXT record that lists the servers allowed to send email for your domain. Receiving mail servers check it, and mail from servers not on the list can be marked as spam or rejected.
What is the 10 DNS lookup limit?
While checking SPF, a receiver may make at most 10 DNS lookups: every include, a, mx, ptr, exists and redirect counts, including those inside included records. Over the limit, SPF fails with a permanent error for all your mail.
Should I use ~all or -all?
~all (soft fail) marks mail from unlisted servers, -all fails it. Start with ~all while you confirm every sender is listed, then move to -all. Never use +all, which allows every server on the internet.
Can a domain have two SPF records?
No. With more than one v=spf1 record, receivers treat SPF as a permanent error. Merge them into one record, combining the includes and addresses.
Does moving my website change SPF?
If the new server sends email itself, for example contact forms or shop notifications, add its IP with ip4: or send through your mail provider. If you move DNS, copy the SPF record to the new DNS host unchanged.
Moving a site to a new server?
See the site on the new server before you change DNS: DNSPeek gives you one HTTPS preview link that works on any device and that you can share with your team or client. No hosts file, no VPN.
Create a free preview link