SPF
Sender Policy Framework (SPF)
Email Marketing
SPF is a DNS record that lists which mail servers are allowed to send email for your domain.
What is SPF?
An SPF record is a TXT record that starts with v=spf1 and names the services allowed to send as you, using include: and ip4: parts, ending in a rule like ~all or -all.
One record per host. Two SPF records on the same host break SPF. Merge them into one.
Watch the lookup limit. RFC 7208 (section 4.6.4) caps SPF at 10 DNS lookups. Every include: counts, so a domain that uses many sending tools can hit the limit and fail. Sending marketing from a subdomain like mail.yourbrand.com keeps your main domain's SPF simple.
Example
v=spf1 include:_spf.google.com include:yourprovider.example ~all lets Google Workspace and one email provider send for the domain.
Why SPF Matters
Without a passing SPF (or DKIM) result, DMARC fails and inbox providers treat your mail as suspect.
SPF FAQ
Can I have two SPF records?
No. A host with two SPF records fails SPF. Merge the include: parts into one record.
Should an SPF record use ~all or -all?
~all (soft fail) is the safer start; -all (hard fail) is stricter once you're sure every sender is listed. DMARC does most of the enforcing either way.
Explore More Terms
Browse our complete glossary of e-commerce and subscription terms.
