Search... ⌘ K
Get Started Contact Sales

Set Up SPF Records

Last updated

SPF (Sender Policy Framework) helps prevent unauthorized individuals from sending emails on your domain’s behalf by specifying which hosts are authorized to send email from your domain.

SPF records are published as TXT records in your DNS zone. The record contains a list of IP addresses and/or hostnames that are permitted to send email from your domain.

Note

SPF is one of three key email authentication protocols. For comprehensive email security, you should also set up DKIM and DMARC. Together, these protocols help protect your domain from spoofing and improve email deliverability.

Warning

DNSimple no longer supports the dedicated SPF record type (type 99), which RFC 7208 deprecated. You can no longer create or edit SPF-type records since August 11, 2025, and existing ones were converted to TXT records on September 8, 2025. Publish SPF as a TXT record. For more information, see the announcement.

Steps to set up SPF

Set up an SPF record
  1. If you have more than one account, select the relevant one from the account switcher at the top-right corner of the screen.
  2. On the header, click the tab.
  3. Locate the relevant domain, and click on the name to access the domain page.
  4. Click at the top right of the domain page.
  5. Click , and select .

  6. Enter the SPF record information:

    • Name field: Leave this blank to create the record at the root of your domain (for example, example.com). This is the standard location for SPF records.

    • Content field: Enter your SPF record. SPF records must start with v=spf1. A basic SPF record might look like this:

    v=spf1 include:_spf.google.com ~all

    Or for a domain that sends email from its own mail server:

    v=spf1 ip4:192.0.2.1 ~all
  7. Click .

Warning

A domain should have only one SPF record. If you already have an SPF record, edit it rather than creating a new one. Multiple SPF records make SPF checks fail (RFC 7208), so DNSimple does not let you add a second SPF record on the same name.

Common SPF record examples

Google Workspace:

v=spf1 include:_spf.google.com ~all

Note

For complete setup instructions, see Google Workspace Service.

Microsoft 365:

v=spf1 include:spf.protection.outlook.com ~all

Note

For complete setup instructions, see Microsoft 365 Service.

SendGrid:

v=spf1 include:sendgrid.net ~all

Postmark:

v=spf1 include:spf.mtasv.net ~all

Multiple providers:

v=spf1 include:_spf.google.com include:spf.mtasv.net ~all

Domain’s own mail server plus providers:

v=spf1 ip4:192.0.2.1 include:_spf.google.com ~all

Note

For general guidance on using third-party email services with DNSimple, see Email Hosting Support.

Understanding SPF mechanisms

SPF records use various mechanisms to specify authorized senders. This is a brief overview of the most commonly used mechanisms:

  • include: - Include the SPF record from another domain (commonly used for email service providers).
  • ip4: - Authorize a specific IPv4 address or range.
  • ip6: - Authorize a specific IPv6 address or range.
  • a - Authorize the domain’s A record.
  • mx - Authorize the domain’s MX records.
  • ~all - Soft fail for all other senders (recommended for gradual deployment).
  • -all - Hard fail for all other senders (strict policy).
  • ?all - Neutral for all other senders (testing mode).

Note

This is a brief overview. For a comprehensive breakdown of SPF record format, all available mechanisms and modifiers, their specific syntax, and important validation rules (including the 10-DNS-lookup limit), see SPF Record Syntax and Validation Reference.

Managing SPF records

SPF records are TXT records. To update or remove them, follow the instructions in How to Use the Record Editor.

Note

A domain should have only one SPF record. If you need to authorize multiple email providers, combine them using multiple include: mechanisms in a single SPF record.

Verifying your SPF record

After setting up your SPF record, verify it is working correctly. For step-by-step instructions, see Verify SPF with dig and Online Tools.

Troubleshooting

If you are experiencing issues with your SPF record, contact support for help diagnosing and resolving common problems.

Technical details

The specification for the Sender Policy Framework is primarily defined in RFC 7208, which supersedes RFC 4408.

Email authentication

Email service integration

DNS management

Have more questions?

If you have additional questions or need any assistance with your SPF records, just contact support, and we’ll be happy to help. You can also read more about DNS hosting at DNSimple.