ZARIVORATools

What Is SPF?

SPF (Sender Policy Framework) is a DNS TXT record listing which servers may send email using your domain. Receiving servers check it before accepting your mail.

Check Your Email Setup →

What a record looks like

v=spf1 include:_spf.google.com include:sendgrid.net ~all — permit Google Workspace and SendGrid, softfail everything else.

Rules that matter

  • Exactly one SPF record per domain. Two records is a permanent error.
  • Maximum ten DNS lookups across all includes; exceeding it fails the check.
  • Use ~all (softfail) while testing, -all (hardfail) once every sender is listed.
  • Include every platform that sends as you: mail provider, CRM, newsletter, invoicing, website forms.

What SPF does not do

SPF breaks when mail is forwarded, and it does not protect the visible From address on its own. Pair it with DKIM and DMARC.