Build your SPF record by adding your authorized servers. Automatic DNS lookup limit check (max 10).
E.g. _spf.google.com for Google Workspace. Each include uses one DNS lookup.
-all (hardfail) is recommended. Use ~all if you're not sure all senders are listed.
SPF (Sender Policy Framework) is a DNS TXT record that lists servers authorized to send emails for your domain.
The 10 DNS lookup limit (RFC 7208) is critical. Each include, a, mx and redirect counts. Beyond that, the result is permerror.
Use -all (hardfail) for maximum protection. Start with ~all if you are not sure all senders are listed.
After publishing, run an audit to verify propagation and DMARC compatibility.
Start a free audit