How to Manage SPF Records for Email Security

<script type="application/json" id="kb_ai_metadata">
{
    "product_name": "email",
    "task_type": "how-to",
    "keywords": ["txt-record", "dns", "dns-management", "mailbox-setup", "webmail", "troubleshooting", "spam-filter", "cannot-send-email", "cannot-receive-email"],
    "status": "current",
    "is_recommended": "true"
}
</script>
<p><a id="top"></a></p>
<style type="text/css">p, div, ol, ul, li {font-family: Arial, Helvetica, sans-serif; font-size: 14px;}
.alert-primary, .alert-primary li {color: #084298;}
.alert-warning, .alert-warning li {color: #664d03;}
.alert-info, .alert-info li {color: #055160;}
h2 {font-weight: bold;}
table { border-collapse: collapse; width: 100%; margin-top: 15px; }
th, td { border: 1px solid #dee2e6; padding: 8px; text-align: left; }
th { background-color: #f2f2f2; }
code { background-color: #f5f5f5; padding: 2px 4px; border-radius: 3px; font-family: monospace; }
/* Bootstrap nav-tab styles */
.nav-tabs .nav-link { border: 1px solid #dee2e6; margin-bottom: -1px; }
.nav-tabs .nav-link.active { background-color: #f8f9fa; border-bottom-color: transparent; }
.tab-content { border: 1px solid #dee2e6; border-top: none; padding: 20px; }
</style>
<section>
<p>Leveraging SPF (Sender Policy Framework) records is essential to enhance email security. Properly configured records help prevent your emails from being delivered to the spam folder and protect your domain against email spoofing. In this article, we will tackle what SPF records are and how to&nbsp;<strong>manage SPF records</strong> in your DNS settings.</p>

<p>Please click the navigational tabs below to learn more about how to&nbsp;<strong>manage SPF records</strong> in your account.</p>
</section>

<div class="container mt-3">
<ul class="nav nav-tabs" role="tablist">
	<li class="nav-item"><a class="nav-link active" data-bs-toggle="tab" href="#what-is-spf">What is an SPF Record?</a></li>
	<li class="nav-item"><a class="nav-link" data-bs-toggle="tab" href="#spf-looks-like">What Do SPF Records Look Like?</a></li>
	<li class="nav-item"><a class="nav-link" data-bs-toggle="tab" href="#update-spf">How to Update an SPF Record</a></li>
</ul>

<div class="tab-content">
<div class="container tab-pane active" id="what-is-spf" style="padding-top:20px;">
<h2>What is an SPF Record?</h2>

<p>SPF (Sender Policy Framework) records, a type of TXT (Text) record within DNS management, are critical in preventing unauthorized individuals from forging the From field in your emails. By setting up an SPF record, a domain owner can define a list of domains and IP addresses that are authorized to send emails on behalf of their domain, effectively safeguarding against email spoofing. This verification ensures that the emails are legitimately from you.</p>

<p><br />
<img alt="SPF record cycle" src="https://content.networksolutions.com/netsol/img/domains/dns/dns_spf_record_cycle.png" style="max-width: 800px; margin: 15px 0;" /></p>

<p>Much like a guest list at an exclusive event, SPF records control access to your email domain's reputation. When an email is sent, the recipient's server acts like a security guard, checking if the sender's domain or IP address is on the SPF guest list. If it's not, the server will either reject the message outright or flag it as suspicious. This mechanism ensures that only approved senders can represent your domain.</p>
</div>

<div class="container tab-pane fade" id="spf-looks-like" style="padding-top:20px;">
<h2>What Do SPF Records Look Like?</h2>

<p>SPF records have required standards. This is how different mail servers can interpret the contents. Below are three examples of different SPF records.</p>

<p><code>v=spf1 include:spf.cloudus.oxcs.net ~all<br />
v=spf1 ip4: 216.21.224.0/24 include:_spf.google.com include:domain.ext ~all<br />
v=spf1 include:spf.registeredsite.com include:spf.cloudus.oxcs.net -all</code></p>

<p>Let’s use the table below to break down each aspect of the contents and see what each one means.</p>

<table class="table table-striped table-hover">
	<thead>
		<tr>
			<th style="text-align: center;"><strong>Mechanism</strong></th>
			<th style="text-align: center;"><strong>Meaning</strong></th>
		</tr>
	</thead>
	<tbody>
		<tr>
			<td>v=spf1</td>
			<td>The server knows this is an SPF record. All SPF records must start with this.</td>
		</tr>
		<tr>
			<td>ip4:</td>
			<td>An IPv4 address or range of addresses authorized to send for the domain.</td>
		</tr>
		<tr>
			<td>ip6:</td>
			<td>An IPv6 address or range of addresses authorized to send for the domain.</td>
		</tr>
		<tr>
			<td>a:example.com</td>
			<td>The mail servers on example.com are authorized to send for the domain.</td>
		</tr>
		<tr>
			<td>mx:mail.example.com</td>
			<td>This MX record is authorized to send messages from the domain.</td>
		</tr>
		<tr>
			<td>include:spf.example.com</td>
			<td>Third parties (like your email provider) are authorized to send for the domain.</td>
		</tr>
		<tr>
			<td>~all or -all</td>
			<td><strong>~all (softfail)</strong> Recommends marking non-compliant messages as suspicious.<br />
			<br />
			<strong>-all (hardfail)</strong> Recommends rejecting non-compliant messages.</td>
		</tr>
	</tbody>
</table>
</div>

<div class="container tab-pane fade" id="update-spf" style="padding-top:20px;">
<h2>How to Update an SPF Record</h2>

<div class="alert alert-warning"><strong>Important:</strong>

<ul>
	<li>Only one SPF record is allowed per domain.</li>
	<li>SPF record changes may take 24-48 hours to propagate.</li>
	<li>If you have a Contact Form, update your existing SPF record to: <code>v=spf1 include:spf.registeredsite.com include:spf.cloudus.oxcs.net ~all</code></li>
</ul>
</div>

<p>Below are the quick steps to <strong>manage SPF records</strong> in your Account Manager.</p>

<ol>
	<li>Log in to your account via <a href="https://www.networksolutions.com/my-account/login" target="_blank">https://www.networksolutions.com/my-account/login</a>.</li>
	<li>Select <strong>Domains</strong> on the left.<br />
	<img alt="Left navigation, Domains options" class="screenshot-image" src="https://content.networksolutions.com/netsol/img/account-manager/account-manager-domains-button.gif" style="max-width: 400px; margin: 15px 0;" /></li>
	<li>Select the domain you want to change, then click the <strong>SETTINGS</strong> button of the respective domain you have chosen.</li>
	<li>Go to the <strong>Advanced Tools</strong> section.<br />
	<img alt="Domains, then Advanced Tools" class="screenshot-image" src="https://content.networksolutions.com/netsol/img/domains/dns/ns-domains-advanced-tools.png" style="max-width: 700px; margin: 15px 0;" /></li>
	<li>Click <strong>Manage</strong> next to Advanced DNS Records.<br />
	<img alt="Advanced Tools, Manage Advanced DNS Records" class="screenshot-image" src="https://content.networksolutions.com/netsol/img/domains/dns/ns-advanced-dns-records-manage.png" style="max-width: 700px; margin: 15px 0;" /></li>
	<li>On the new page, either click <strong>+Add Record</strong> to add or the <strong>pencil icon</strong> to edit.<br />
	<img alt="Manage Advanced DNS Records" class="screenshot-image" src="https://content.networksolutions.com/netsol/img/domains/dns/ns-manage-advanced-dns-page.png" style="max-width: 700px; margin: 15px 0;" /></li>
	<li>Select <strong>Refers to</strong> from the drop-down menu.<br />
	<img alt="Add Advanced DNS Record, then select TXT in the dropdown" class="screenshot-image" src="https://content.networksolutions.com/netsol/img/domains/dns/nsadd-txt-advanced-dns-records.png" style="max-width: 400px; margin: 15px 0;" /></li>
	<li>Enter the <strong>TXT Value</strong>.</li>
	<li>Enter the <strong>TTL</strong> (default is 7200).</li>
	<li>Click <strong>Add</strong> or <strong>Edit</strong>.</li>
</ol>
</div>
</div>
</div>

<p>&nbsp;</p>

<h2>Review</h2>

<p>SPF records are essential for email security. They specify which servers can send email from your domain, preventing spoofing and improving email deliverability. To properly <strong>manage SPF records</strong>, you need to add the correct TXT value based on your email platform. By following this guide, you can take a proactive step to protect your brand reputation and ensure the trust of your recipients.</p>

<div class="fixed"><a class="btn btn-outline-primary btn-sm fixed" href="#top" role="button">Back to Top ↑</a></div>