Create an SPF Record
Sender Policy Framework, usually shortened to SPF, is a DNS policy that identifies which systems are authorised to send email for a domain. Receiving mail systems can compare a message with that policy as part of their spam and spoofing checks.
Collect the correct SPF instructions
List every legitimate service that sends mail using your domain, including your mailbox provider, website forms, newsletter platform and transactional email service. Use the SPF value supplied by each provider. Do not guess an IP address or copy a policy from another domain.
Add or update the policy
- Open the DNS records at the provider used by your active nameservers.
- Search the root domain and relevant subdomains for TXT values beginning with
v=spf1. - If no policy exists, add the TXT record supplied by your email provider.
- If a policy already exists, update that single policy to include all authorised senders rather than adding another SPF record for the same name.
- Save the change and verify it with the sending provider or a DNS lookup.
Review the complete email setup
SPF is only one part of domain email authentication. Your provider may also ask you to add DKIM records and a DMARC policy. If website messages are not arriving, review Contact Forms Failing and Spam Bounce-backs From Your Site.
Common questions
Frequently Asked Questions
Can a domain have two SPF records?
A hostname should publish one SPF policy. Multiple SPF records for the same name can produce a permanent SPF error, so authorised senders should be combined into one valid policy.
Is every TXT record an SPF record?
No. TXT records are also used for service verification, DKIM, DMARC and other purposes. An SPF policy begins with v=spf1.
Does SPF guarantee that email reaches the inbox?
No. SPF supports sender authentication, but delivery also depends on DKIM, DMARC, message quality, domain reputation and the receiving provider.
Should my website be included in SPF?
Only if the website server sends mail directly using your domain. If a separate mail service sends website messages, follow that service's SPF instructions instead.