What is SPF Record?

An SPF (Sender Policy Framework) record is a DNS TXT record listing which mail servers are allowed to send email for a domain.

It starts with v=spf1, lists permitted senders with include:, ip4: and similar mechanisms, and ends with -all (reject others) or ~all (soft-fail). Ending in +all authorises the whole internet and defeats the purpose.

SPF works together with DKIM signatures and a DMARC policy; on its own it does not stop spoofing of the visible From address.

Check it on your own site

Scan any domain for HTTPS/TLS, security headers, cookies, SPF and DMARC, get an A+–F grade and a PDF report with copy-paste fixes.

Run the free Website Security Audit

Related terms