How to Create an SPF Record

SPF (Sender Policy Framework) is an email authentication method that helps prevent email spoofing by specifying which mail servers are authorised to send emails on behalf of your domain. Implementing an SPF record improves email deliverability and security.

Step 1: Understand SPF Record Syntax

An SPF record is a TXT record in your DNS settings that defines permitted email senders. Key components of an SPF record include:

• v=spf1 – Specifies SPF version 1.

• ip4 & ip6 – Defines authorised IPv4 and IPv6 addresses.

• include: – Authorises third-party email providers (e.g., Google, Microsoft, Mailchimp).

• -all – Defines the strictness of the SPF policy:

  • -all (Fail) – Reject unauthorised emails.

  • ~all (SoftFail) – Mark unauthorised emails as suspicious.

  • +all (Pass) – Allows all emails (not recommended).

Step 2: Create an SPF Record

Basic SPF Record for Your Own Mail Server:

example.com. IN TXT "v=spf1 ip4:192.168.1.1 -all"

This allows only the IP 192.168.1.1 to send emails for example.com.

SPF Record for Google Workspace:

example.com. IN TXT "v=spf1 include:_spf.google.com -all"

This authorises Google's mail servers to send emails on behalf of your domain.

SPF Record for Multiple Email Services:

example.com. IN TXT "v=spf1 ip4:192.168.1.1 include:_spf.google.com include:spf.protection.outlook.com -all"

This allows both a dedicated mail server and third-party providers like Google and Microsoft to send emails.

Step 3: Add the SPF Record to Your DNS

1. Log in to your DNS provider’s control panel.

2. Go to the DNS management section.

3. Create a new TXT record:

   • Host: @ (or example.com if required by your provider).

   • Type: TXT.

   • Value: Paste your SPF record.

   • TTL: 1 hour (or default setting).

4. Save the record and wait for DNS propagation (up to 48 hours).

Step 4: Verify Your SPF Record

Once added, verify your SPF record using tools like:

• MXToolBox SPF Checker (https://mxtoolbox.com/spf.aspx)

• Google Admin Toolbox Dig Tool (https://toolbox.googleapps.com/apps/checkmx/)

FAQs

Can I have multiple SPF records?

No, a domain should have only one SPF record. If you need multiple services, combine them into a single record using include:.

What happens if I use -all?

-all is a strict policy that blocks unauthorised emails. Use ~all if you want a softer approach while monitoring.

How long does it take for an SPF record to work?

It can take 24-48 hours for DNS changes to propagate.

Do SPF records improve email deliverability?

Yes, SPF helps prevent spoofing and improves email reputation, reducing the chance of emails landing in spam.

Setting up an SPF record is an essential step in securing your domain’s email system. By specifying authorised mail servers and third-party services, SPF helps prevent phishing and improves deliverability. Always monitor your SPF record and adjust as needed.