Create your
SPF record.
Pick the services that send email for your domain and copy
a ready-to-publish SPF record.
One domain. The bigger picture.
Hosting, registrar, expiry, DNS records, email, and security details appear here.
PUBLIC DATA. ONE SIMPLE LOOKUP.Publishing your SPF record
Add the record as a TXT record on your domain’s root, shown as @ by most DNS providers. If there’s already a record starting v=spf1, replace it rather than adding a second one: two SPF records break SPF.
List every service that sends email using your domain: your mailbox provider, newsletter tools, help desks, and website or invoicing systems. After publishing, check the live record with the SPF record checker to count the nested DNS lookups.
Common questions
Where do I add my SPF record?
At your DNS host, which is usually your registrar, web host, or Cloudflare. Create a TXT record with the name @ (or your domain) and paste the value.
What does the all at the end mean?
It sets what happens to mail from servers you haven’t listed. ~all marks it as suspicious; -all asks receivers to reject it. Start with ~all if you’re not sure every sender is listed.
Do I need SPF if my domain doesn’t send email?
Yes. Publish v=spf1 -all on domains that never send mail so no one can spoof them, and add a DMARC record with p=reject.