.png&w=3840&q=75)
DNS3 min
What is an SPF Record and How to Add It to Your DNS
NS
NameSilo Staff6/5/2026
Share
An SPF (Sender Policy Framework) record is a DNS TXT record that lists every server authorized to send emails from your domain name. Email networks (like Gmail) look up this list to verify messages aren't fraudulent. To add it, input a text string containing your provider keys (v=spf1 include:exampleserver.com ~all) inside your registrar settings.
What Is an SPF Record?
SPF creates a whitelist of authorized email senders for your domain:
Component | Function |
DNS TXT record | Stores the SPF policy |
Authorized servers | IP addresses or domains allowed to send |
Policy action | What to do with unauthorized senders |
How it works: When someone receives email from your domain, their server queries your DNS for an SPF record. If the sending server matches your authorized list, the email passes. If not, it's flagged or rejected.
Think of it as: A guest list for your domain. Only servers on the list can send mail on your behalf.
Why It Matters: Pass Spam Filters Automatically
Without SPF: Emails land in spam, servers flag messages as suspicious, spammers can forge your domain.
With SPF: Receiving servers trust your emails, higher inbox placement, protection against spoofing.
2024 requirements: Google and Yahoo mandate SPF for bulk senders. Without it, emails may be rejected, not just filtered.
SPF is no longer optional for business email.
Decoding SPF Syntax
Every SPF record follows this structure:
v=spf1 [mechanisms] [qualifier]all
Element | Meaning | Example |
v=spf1 | SPF version (always required) | v=spf1 |
include: | Authorize another domain's servers | include:_spf.google.com |
ip4: | Authorize specific IP address | ip4:192.168.1.1 |
a | Authorize your domain's A record IP | a |
mx | Authorize your MX record servers | mx |
~all | Soft fail unauthorized (recommended) | Mark as suspicious |
-all | Hard fail unauthorized | Reject outright |
Soft fail (~all): Unauthorized emails are marked suspicious but delivered. Safer during setup.
Hard fail (-all): Unauthorized emails are rejected. Use only when confident your SPF is complete.
Example record:
v=spf1 include:_spf.google.com include:sendgrid.net ~all
This authorizes Google Workspace and SendGrid to send for your domain.
Implementation Steps: Add or Merge SPF Records
Step 1: Identify All Sending Services List every platform sending email from your domain: email host, CRM, marketing tools, transactional email services.
Step 2: Collect SPF Values Each service provides their SPF include statement. Examples:
- Google Workspace: include:_spf.google.com
- Microsoft 365: include:spf.protection.outlook.com
- Mailchimp: include:servers.mcsv.net
- SendGrid: include:sendgrid.net
Step 3: Combine Into One Record Merge all includes into a single TXT record:
v=spf1 include:_spf.google.com include:servers.mcsv.net ~all
Step 4: Add to DNS In NameSilo DNS Manager:
- Type: TXT
- Host: @ (or blank)
- Value: Your combined SPF string
- TTL: 3600
Step 5: Verify Use MXToolbox SPF Lookup to confirm your record is valid and complete.
Common Mistakes
Multiple SPF records: The #1 cause of SPF failure. DNS allows only ONE SPF record per domain. Two records invalidate both, authentication breaks completely.
Wrong fix: Adding a second TXT record for a new service. Right fix: Edit existing SPF and add another include: statement.
Too many lookups: SPF allows maximum 10 DNS lookups. Exceeding this fails SPF.
Forgetting a sending service: If your CRM isn't in SPF, those messages fail.
What This Means for You
NameSilo Email works seamlessly with properly configured SPF. Add your TXT record in DNS Manager to authorize your email servers.
Frequently Asked Questions
What happens if I have two SPF records?
Both become invalid. Merge into one.
What does ~all mean in SPF?
Soft fail, mark unauthorized suspicious but deliver.
How do I generate an SPF record?
Combine includes from each email service.
Can SPF cause emails to bounce?
Yes, if misconfigured or authorization incomplete.
How long does SPF take to update?
Typically 15-30 minutes.
What is ip4 in SPF?
Directly authorizes a specific IP address.
Is SPF required for business email?
Effectively yes, Gmail/Yahoo require it.
How do I add TXT records at NameSilo?
DNS Manager → Add Record → TXT → Save.
.png&w=2048&q=75)
NameSilo StaffThe NameSilo staff of writers worked together on this post. It was a combination of efforts from our passionate writers that produce content to educate and provide insights for all our readers.
More articleswritten by NameSilo
