SPF is a DNS record that lists which mail servers are allowed to send email on behalf of your domain. Publish exactly one SPF record naming your real mail providers, and nothing else. Two SPF records, or none, both weaken your email's deliverability.
Why it matters
Without SPF, receiving mail servers have no way to check that an email claiming to be from your domain actually came from a server you control. That makes it easier to spoof your domain, and it makes mailbox providers more likely to send your genuine mail to spam.
SPF also feeds directly into DMARC alignment. A missing or broken SPF record can cause an otherwise correct DMARC policy to fail mail that should have passed.
How AuditCrow checks this
AuditCrow performs a DNS TXT lookup for the domain and checks for exactly one record starting `v=spf1`. More than one SPF record, or none, is flagged.
How to fix it
- 1Check your domain's DNS for a TXT record starting `v=spf1`, using AuditCrow's own SPF checker or any public DNS lookup tool.
- 2If none exists, add one listing every service that sends mail as your domain: your web host, your email provider, and any marketing or invoicing tool that sends on your behalf. Each provider publishes the exact `include:` value to add.
- 3If more than one exists, merge them into a single record. Having two SPF records is invalid and most receivers treat it as a failure, even if each one individually looks fine.
- 4SPF has a hard limit of 10 DNS lookups. A record with many `include:` statements from multiple third-party tools can quietly exceed this and start failing. If you use several marketing and email tools, check the total lookup count rather than just the record's presence.
- 5This is a DNS change, made wherever your domain's nameservers are managed (your registrar or hosting provider), not a change to the website itself.
Fix it on your platform
How to fix it on Google Workspace
- If Google Workspace is your only sender, your SPF value is v=spf1 include:_spf.google.com ~all.
- About 48 hours after SPF is live, add a DMARC record at _dmarc with v=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.co.uk.
Source: Set up SPF · Last checked
How to fix it on Microsoft 365
- If Microsoft 365 is your only sender, your SPF value is v=spf1 include:spf.protection.outlook.com -all.
- Add a DMARC record at _dmarc with v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.co.uk.
Note: Microsoft 365 has no screen for this: add both records at your DNS host.
Source: Set up SPF to identify valid email sources for your Microsoft 365 domain · Last checked
How to fix it on Cloudflare
Where: DNS > Records > Add record
- In the Cloudflare dashboard open your domain, go to DNS > Records and select Add record.
- Add a TXT record with Name @ and your SPF value, keep Proxy status as DNS only, and save.
- Add another TXT record with Name _dmarc and your DMARC value.
Source: Set up Google Workspace DNS records · Last checked
How to fix it on GoDaddy
Where: Domain Portfolio > your domain > Domain Settings > DNS > Add New Record
- In your GoDaddy Domain Portfolio open the domain, then select DNS.
- Select Add New Record, choose TXT, set Name to @ and Value to your SPF value.
- Add a second TXT record with Name _dmarc and your DMARC value, then save.
Note: If there's already an SPF record, edit it instead of adding another.
Source: Add a TXT record · Last checked
How to fix it on IONOS
Where: Domains & SSL > Actions > DNS > Add Record
- In IONOS go to Domains & SSL, click the gear symbol under Actions for your domain and choose DNS.
- Edit the existing SPF record if there is one, or click Add Record, choose TXT, set Host name to @ and add your SPF value.
- Add another TXT record with Host name _dmarc and your DMARC value, then save.
Note: IONOS adds its own SPF record by default for IONOS-hosted domains: add other senders to that one.
Source: Managing TXT Records · Last checked
How to fix it on 123 Reg
Where: Control Panel > Manage All > your domain > DNS > Add New Record
- In the 123 Reg Control Panel select Manage All next to Domains, pick your domain, then select DNS.
- Select Add New Record, choose TXT, enter @ as Name and your SPF value as Value, then save.
- Add a second TXT record with Name _dmarc and your DMARC value.
Note: These only take effect if the domain uses 123 Reg's nameservers.
Source: How do I set up a TXT record on my domain name? · Last checked
How to fix it on any other website
- At your DNS host, add one TXT record at your domain root listing every sender, e.g. v=spf1 include:_spf.google.com include:servers.mcsv.net ~all.
- Add a TXT record at _dmarc.yourdomain.co.uk with v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.co.uk.
Note: SPF breaks on stray spaces and typos, so re-check the published record.
Source: Create and iterate an SPF record · Last checked
Related checks
Want to see whether your own site passes this check, and everything else?