Loading...
Loading...
Generate a valid SPF TXT record for your domain. Add authorized mail servers, IP addresses, and third-party includes to protect your domain from email spoofing.
v=spf1 followed by mechanisms and ends with an all qualifier.include, a, mx, ptr, exists, and redirect. IP-based mechanisms like ip4 and ip6 do not count. Exceeding 10 lookups causes a 'permerror' and SPF validation fails entirely.~all (softfail) for most setups, especially during initial deployment. It marks unauthorized emails as suspicious without rejecting them. Once you've confirmed all legitimate senders are included, switch to -all (fail) for maximum protection. Avoid ?all (neutral) as it provides no protection, and never use +all as it allows anyone to send as your domain.include: for third-party email services (e.g., include:_spf.google.com for Google Workspace), ip4: or ip6: for specific server IP addresses, mx to authorize your domain's mail exchange servers, and a to authorize your domain's A record IP. Each email service provider will tell you which include or IP to add.@ (or leave blank for the root domain). (5) Paste your generated SPF record as the value. (6) Save the record. DNS propagation typically takes 5 minutes to 48 hours. You can only have one SPF record per domain — if one already exists, update it instead of creating a new one.