How to configure your SPF Email?

[Ehsanuls55]

If you've read this far, you already know what Email SPF is and why you should implement it.

Now, the big question is how to do it.

First of all, you should check out the following video. It is a tutorial that shows you how the FPS works and how to configure it quickly.


If you need more details, you can check out the 2-step guide below.

But first, please note that:

It may take up to 48 hours before Email SPF authentication starts working correctly.
The field titles for the following actions may differ depending on your domain vp quality email lists provider, as DNS TXT record headers vary between providers.
1) Log in to your DNS server
Simply connect to your hosting server and find the DNS control panel.

If you are using Google Workspace, you can find the DNS control panel by accessing the Google Admin console and clicking on the “Apps” tab.

From there, you can click on the “Google Workspace” tab and then select “DNS” from the list of options.

Alternatively, you can simply search for “DNS” in the Google Admin console search bar to find the DNS control panel.

2) Create a new TXT record
Let's walk through an email SPF record to better understand how it works. You can find an example in the TXT record of any DNS server:

v=spf1 a ip4:12.34.56.78/28 include:lagrowthmachine.com ~all

This specific SPF email policy is configured so that emails can only originate from 12.34.56, 78/28, and lagrowthmachine.com.


Anything else would result in being labeled as a soft fail in SPF compliance.

To better understand how these records work, let's analyze the SPF syntax with our given example:

v=spf1: This detail specifies the version of SPF in use.
If the domain has an A or AAAA record that correlates to its assigned IP address, it will be identified as a winning combination.
IPv4 Code – Indicates that the subsequent IPv4 address is approved to send messages. Here, 12.34.56.78/28 indicates the server that is allowed to send email messages, allowing all machines within the entire /28 subnet rather than a single IP address. Organizations with multiple mail servers or fully dedicated subnets gain immense benefits from this setup – plus, it also drastically reduces lengthy email SPF records, so be sure to take advantage of this feature!
~all: An alternate server is also allowed to send emails on behalf of the domain. For example, this may include a third-party email marketing service provider. For any other mail source not included in the list, label it as a soft fail in SPF and let its emails through.