{"id":1549,"date":"2021-05-20T08:44:06","date_gmt":"2021-05-20T05:44:06","guid":{"rendered":"https:\/\/www.scalahosting.com\/kb\/?p=1549"},"modified":"2022-03-09T17:50:06","modified_gmt":"2022-03-09T15:50:06","slug":"what-is-an-spf-record","status":"publish","type":"post","link":"https:\/\/www.scalahosting.com\/kb\/what-is-an-spf-record\/","title":{"rendered":"What is an SPF Record?"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">People send <\/span><a href=\"https:\/\/www.statista.com\/statistics\/456500\/daily-number-of-e-mails-worldwide\/\"><b>over 300 billion emails<\/b><\/a> <span style=\"font-weight: 400;\">worldwide daily. For security-conscious users, the Sender Policy Framework (SPF) helps authenticate their emails as they travel across the internet toward recipients\u2019 inboxes.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Here,<\/span><b> we\u2019ll examine what an SPF record<\/b><span style=\"font-weight: 400;\"> is, why you need it, and how to set it up in quick, simple steps.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Let\u2019s get to it.<\/span><\/p>\n<h2><b>What\u2019s SPF Record?<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">An SPF record is a DNS record that indicates to mail exchanges the authorized host to send mails for a domain. It detects forged sender addresses during email delivery, thus helping to authenticate emails.<\/span><\/p>\n<p><b>The framework allows the receiving mail server to check during mail deliveries <\/b><span style=\"font-weight: 400;\">that a mail claiming to come from a specific domain is coming from there. It reads the DNS records for the list of authorized sending hosts and IP addresses.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">SPF works better with DMARC to detect forged sender addresses and authenticate sent emails.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Let\u2019s quickly examine how the Sender Policy Framework works.\u00a0<\/span><\/p>\n<h2><b>How Simple Policy Framework Work<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Simple Message Transfer Protocol is an outgoing email protocol that defines how to send emails through email clients.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It permits any computer to send emails from any source address. Spammers often exploit this to forge sender addresses, making it difficult to trace the message\u2019s source and the spammers\u2019 identities.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Internet domain owners use SPF information in <\/span><b>DNS TXT records <\/b><span style=\"font-weight: 400;\">to specify which computer or IP address they authorized to send mails with envelope-from addresses in that domain.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">So, when a user sends an email that claims to come from that domain, the receiving mail server verifies the domain administrator authorized <\/span><b>the <\/b><a href=\"https:\/\/www.scalahosting.com\/blog\/what-is-my-ip\/\"><b>IP address<\/b><\/a><b> in TXT records to send emails before delivering the message to the recipient.<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The verifying receiver rejects messages from unauthorized sources.<\/span><\/p>\n<h2><b>Why You Need an SPF Record<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Implementing SPF records for your domain comes with huge benefits. <\/span><span style=\"font-weight: 400;\">Let\u2019s quickly look at some of them.<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It helps prevent emails from going into spam, hence improving your mail deliverability, which is good for your IP address or sender reputation.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SPF records could detect forged sender addresses, making SPF-protected domains less attractive to spammers and phishers.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Implementing SPF records ensures spam filters catch emails from scammers pretending to represent your company, allowing only legitimate emails from you to go through.\u00a0<\/span><\/li>\n<\/ul>\n<h2><b>Setting Up SPF Record for a Domain<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">SPF records occur as a single string of text, like the example below.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">v=spf1 a mx ip4:69.64.153.131 include:_spf.google.com ~all<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Let\u2019s quickly examine how to implement one for a domain.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">To get started, log in to your <\/span><a href=\"https:\/\/www.scalahosting.com\/kb\/getting-started-with-spanel\/\"><b>SPanel account<\/b><\/a><span style=\"font-weight: 400;\">\u2014 ScalaHosting&#8217;s all-in-one management platform. The default login URL is <em><strong>yourdomain.com\/spanel<\/strong><\/em><em>.<\/em><\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-full wp-image-1553\" src=\"https:\/\/www.scalahosting.com\/kb\/wp-content\/uploads\/2021\/05\/image1-11.png\" alt=\"What is an SPF Record?, Setting Up SPF Record for a Domain\" width=\"340\" height=\"336\" srcset=\"https:\/\/www.scalahosting.com\/kb\/wp-content\/uploads\/2021\/05\/image1-11.png 340w, https:\/\/www.scalahosting.com\/kb\/wp-content\/uploads\/2021\/05\/image1-11-300x296.png 300w\" sizes=\"(max-width: 361px) 660px, (max-width: 767px) 89vw, (max-width: 1000px) 54vw, (max-width: 1071px) 910px, 1140px\" \/><\/p>\n<p><span style=\"font-weight: 400;\">Click DNS Editor under Domains to make changes to your DNS record.<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-full wp-image-1552\" src=\"https:\/\/www.scalahosting.com\/kb\/wp-content\/uploads\/2021\/05\/image5-8.png\" alt=\"What is an SPF Record?, Setting Up SPF Record for a Domain 2\" width=\"746\" height=\"156\" srcset=\"https:\/\/www.scalahosting.com\/kb\/wp-content\/uploads\/2021\/05\/image5-8.png 746w, https:\/\/www.scalahosting.com\/kb\/wp-content\/uploads\/2021\/05\/image5-8-300x63.png 300w\" sizes=\"(max-width: 361px) 660px, (max-width: 767px) 89vw, (max-width: 1000px) 54vw, (max-width: 1071px) 910px, 1140px\" \/><\/p>\n<p><span style=\"font-weight: 400;\">Choose the domain you want to add the SPF record to.<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-full wp-image-1551\" src=\"https:\/\/www.scalahosting.com\/kb\/wp-content\/uploads\/2021\/05\/image4-10.png\" alt=\"What is an SPF Record?, Setting Up SPF Record for a Domain 3\" width=\"716\" height=\"187\" srcset=\"https:\/\/www.scalahosting.com\/kb\/wp-content\/uploads\/2021\/05\/image4-10.png 716w, https:\/\/www.scalahosting.com\/kb\/wp-content\/uploads\/2021\/05\/image4-10-300x78.png 300w\" sizes=\"(max-width: 361px) 660px, (max-width: 767px) 89vw, (max-width: 1000px) 54vw, (max-width: 1071px) 910px, 1140px\" \/><\/p>\n<p><span style=\"font-weight: 400;\">Under the ADD A NEW RECORD section, enter your domain name. For example, <\/span><i><span style=\"font-weight: 400;\">domain.com<\/span><\/i><span style=\"font-weight: 400;\"> in the Name text box.<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-full wp-image-1554\" src=\"https:\/\/www.scalahosting.com\/kb\/wp-content\/uploads\/2021\/05\/image2-11.png\" alt=\"What is an SPF Record?, Setting Up SPF Record for a Domain 4\" width=\"1240\" height=\"283\" srcset=\"https:\/\/www.scalahosting.com\/kb\/wp-content\/uploads\/2021\/05\/image2-11.png 1240w, https:\/\/www.scalahosting.com\/kb\/wp-content\/uploads\/2021\/05\/image2-11-300x68.png 300w, https:\/\/www.scalahosting.com\/kb\/wp-content\/uploads\/2021\/05\/image2-11-1024x234.png 1024w, https:\/\/www.scalahosting.com\/kb\/wp-content\/uploads\/2021\/05\/image2-11-768x175.png 768w\" sizes=\"(max-width: 361px) 660px, (max-width: 767px) 89vw, (max-width: 1000px) 54vw, (max-width: 1071px) 910px, 1140px\" \/><\/p>\n<p><span style=\"font-weight: 400;\">Set your TTL value, or you could use the default value.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">TTL stands for Time to Live. <\/span><span style=\"font-weight: 400;\">It\u2019s the amount of time web admins set a packet (<\/span><i><span style=\"font-weight: 400;\">DNS information<\/span><\/i><span style=\"font-weight: 400;\">) to exist in a DNS cache before expiration.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Select TXT as the record type.\u00a0<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter size-full wp-image-1550\" src=\"https:\/\/www.scalahosting.com\/kb\/wp-content\/uploads\/2021\/05\/image3-11.png\" alt=\"What is an SPF Record?, Setting Up SPF Record for a Domain 5\" width=\"318\" height=\"259\" srcset=\"https:\/\/www.scalahosting.com\/kb\/wp-content\/uploads\/2021\/05\/image3-11.png 318w, https:\/\/www.scalahosting.com\/kb\/wp-content\/uploads\/2021\/05\/image3-11-300x244.png 300w\" sizes=\"(max-width: 361px) 660px, (max-width: 767px) 89vw, (max-width: 1000px) 54vw, (max-width: 1071px) 910px, 1140px\" \/><\/p>\n<p><span style=\"font-weight: 400;\">TXT is a DNS record for storing text-based information related to your domain.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Now, c<\/span><b>opy and paste your SPF information in the Value text box and the blue button to add the record to your DNS records.<\/b><\/p>\n<p><span style=\"font-weight: 400;\">That\u2019s it.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">But let\u2019s quickly go through the things you have to keep in mind while implementing SPF for your domain.<\/span><\/p>\n<h2><b>SPF Record Generators<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">Use these online tools to generate the SPF record for the domain. Use the information for your SPF implementation value.<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">MxToolBox SPF Record Generator<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DMARC Analyzer SPF Record Generator<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">PowerDMARC SPF Record Generator<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">MailWizz SPF Record Generator<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">ZeroBounce SPF Generator<\/span><\/li>\n<\/ul>\n<h2><b>SPF Implementation Best Practices<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">The SPF records of one-sixth of the top web domains suck, according to Fraudmarc.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">A poorly set up SPF records can adversely impact deliverability.<\/span><b> Follow these best practices to make your SPF implementation shine.<\/b><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Set up only one record per domain. Modify the existing record to make new changes instead of creating a new record. You should merge two different records into one.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Try to limit the SPF records to 255 characters for a single string.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Use TXT DNS record type to implement SPF.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">If you are using an <\/span><span style=\"font-weight: 400;\">include<\/span><span style=\"font-weight: 400;\"> mechanism in your record, avoid duplicating the IP addresses and subnets.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Avoid using the <\/span><span style=\"font-weight: 400;\">exists <\/span><span style=\"font-weight: 400;\">mechanism in your records unless you have advanced knowledge of its usage.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Avoid terminating your SPF record in \u2018<\/span><span style=\"font-weight: 400;\">+all<\/span><span style=\"font-weight: 400;\">.\u2019 It allows the entire internet to send emails on your behalf.\u00a0<\/span><\/li>\n<\/ul>\n<p><b>Note:<\/b><span style=\"font-weight: 400;\"> SPF mechanism defines the authorized IP addresses allowed to send emails; they are: <\/span><span style=\"font-weight: 400;\">all, include, a, mx, ip4, ip6, exists. <\/span><span style=\"font-weight: 400;\">The <\/span><span style=\"font-weight: 400;\">all<\/span><span style=\"font-weight: 400;\"> mechanism matches any IP address, while <\/span><span style=\"font-weight: 400;\">include <\/span><span style=\"font-weight: 400;\">allows you to specify the IP addresses to authorize.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The SPF qualifiers specify how SPF mechanisms handle a match; examples include:\u00a0<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">+<\/span> <span style=\"font-weight: 400;\">for pass<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">&#8211;<\/span> <span style=\"font-weight: 400;\">for fail<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">~<\/span> <span style=\"font-weight: 400;\">for soft fail<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">?<\/span> <span style=\"font-weight: 400;\">for neutral<\/span><\/li>\n<\/ul>\n<h2><b>Wrapping It Up<\/b><\/h2>\n<p><span style=\"font-weight: 400;\">This article has outlined how to set up SPF records for any domain. Follow the steps and best practices to ensure your emails don\u2019t end up in the spam folders.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Feel free to <\/span><a href=\"https:\/\/www.scalahosting.com\/contact-us.html\"><span style=\"font-weight: 400;\">contact our support<\/span><\/a><span style=\"font-weight: 400;\"> team when you need help.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>People send over 300 billion emails worldwide daily. For security-conscious users, the Sender Policy Framework (SPF) helps authenticate their emails as they travel across the internet toward recipients\u2019 inboxes. Here, we\u2019ll examine what an SPF record is, why you need it, and how to set it up in quick, simple steps. Let\u2019s get to it. [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","footnotes":""},"categories":[26],"tags":[],"class_list":["post-1549","post","type-post","status-publish","format-standard","hentry","category-email-hosting"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.scalahosting.com\/kb\/wp-json\/wp\/v2\/posts\/1549","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.scalahosting.com\/kb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.scalahosting.com\/kb\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.scalahosting.com\/kb\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.scalahosting.com\/kb\/wp-json\/wp\/v2\/comments?post=1549"}],"version-history":[{"count":2,"href":"https:\/\/www.scalahosting.com\/kb\/wp-json\/wp\/v2\/posts\/1549\/revisions"}],"predecessor-version":[{"id":3833,"href":"https:\/\/www.scalahosting.com\/kb\/wp-json\/wp\/v2\/posts\/1549\/revisions\/3833"}],"wp:attachment":[{"href":"https:\/\/www.scalahosting.com\/kb\/wp-json\/wp\/v2\/media?parent=1549"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.scalahosting.com\/kb\/wp-json\/wp\/v2\/categories?post=1549"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.scalahosting.com\/kb\/wp-json\/wp\/v2\/tags?post=1549"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}