What is SPF?
Sender Policy Framework (SPF) is a DNS TXT record that lists which mail servers are allowed to send email using your domain. Receiving servers check it to detect spoofing, which helps your legitimate email reach inboxes and stops attackers impersonating you.
How to publish it
- Build your record above.
- In your DNS provider, add a TXT record for your root domain (
@). - Paste the generated value. Use only one SPF record per domain.
- Wait for DNS to propagate, then test with an email auth checker.
Example
A domain using Google Workspace typically needs: v=spf1 include:_spf.google.com ~all.
10-lookup limit: SPF allows at most 10 DNS lookups. Each
include, a, and mx counts — too many causes a permerror. Keep includes minimal.~all vs -all
~all(soft fail) — mark others as suspicious but still accept. Safer while setting up.-all(hard fail) — reject anything not listed. Use once you're confident everything is covered.