How to setup an SPF record?

SPF (Sender Policy Framework) setup requires adding a DNS TXT record that lists authorized mail servers.

Step-by-step setup:

1. Identify your email senders List all services sending email on your behalf:

• Email provider (Google Workspace, Microsoft 365, etc.)
• Marketing platforms (Mailchimp, SendGrid, etc.)
• Transactional email services (Postmark, AWS SES, etc.)

2. Build your SPF record Format: v=spf1 [mechanisms] [qualifier]all

Example for Google Workspace: v=spf1 include:_spf.google.com ~all

Example for multiple senders: v=spf1 include:_spf.google.com include:sendgrid.net ip4:203.0.113.1 ~all

3. Add the DNS TXT record

• Log into your DNS provider (Cloudflare, Route 53, etc.)
• Create new TXT record
• Name/Host: @ (root domain)
• Value: Your SPF record string
• TTL: 3600 (1 hour)

4. Verify with IntoDNS.ai Scan your domain to verify:

• Record is published correctly
• No syntax errors
• All senders are included
• Under 10 DNS lookup limit

Common mistakes:

• Multiple SPF records (only one allowed)
• Exceeding 10 DNS lookup limit
• Missing include: for third-party senders
• Using -all before testing (use ~all first)

SPF qualifiers:

• ~all (softfail) - Recommended for testing
• -all (hardfail) - Strict enforcement after verification
• +all (pass) - Never use, allows anyone
• ?all (neutral) - No protection