SPF Record Examples For Office 365, Mailchimp, Zoho & More


Configuring Sender Policy Framework (SPF) records is crucial for safeguarding your domain against email spoofing and enhancing the likelihood of successful email delivery. An SPF record, which is a type of DNS TXT record, specifies the mail servers permitted to send emails for your domain. If you utilize external email services such as Office 365, Mailchimp, or Zoho, it’s important to ensure that your SPF record is accurately set up for each one. This article offers straightforward examples of SPF records for popular email providers and outlines how to merge them securely.


Understanding SPF Records: A Quick Overview


Prior to examining particular cases, it's important to briefly go over the format of an SPF record. This record is incorporated into your domain's DNS as a TXT entry and generally appears as follows:

v=spf1 include:example.com -all

In this format:

  • v=spf1: Specifies the SPF version in use.

  • include:: Permits third-party domains or services to send emails on your behalf.

  • -all: Indicates a strict failure for any unauthorized senders.

The objective is to enumerate all the services you utilize for sending emails from your domain while adhering to the 10 DNS lookup limitation set by SPF. Uncover the wide range of services we offer here.



spf-record-example



SPF Record for Office 365 (Microsoft 365)


If your organization utilizes Microsoft 365 (previously known as Office 365) for email communication, it is essential to ensure that your SPF record incorporates the mail servers designated by Microsoft.

Sample SPF Record:

v=spf1 include:spf.protection.outlook.com -all

Important Points:

  • Microsoft advises that all Office 365 accounts should use:spf.protection.outlook.com.

  • Should you dispatch emails from other platforms (such as web applications or marketing tools), those should also be accounted for in your SPF record.

SPF Record for Mailchimp


Mailchimp is widely utilized for email marketing campaigns. Although updating your SPF record isn't mandatory with Mailchimp, making this adjustment can enhance your email deliverability.

Sample SPF Record:

v=spf1 include:servers.mcsv.net -all

Important Points:

  • Configuring SPF is not compulsory, but it is advisable.

  • For complete domain verification, Mailchimp necessitates domain authentication through DKIM.

SPF Record for Zoho Mail


Zoho Mail is a well-known email hosting solution, particularly favored by small enterprises.

Sample SPF Record:

v=spf1 include:zoho.com -all

Important Points:

  • When utilizing both Zoho Mail and other services, ensure that you correctly merge the includes.

  • It's essential to refrain from having multiple v=spf1 entries; each domain should have only one SPF record.

Combining SPF Records for Multiple Services


Numerous companies utilize multiple email services simultaneously. For example, you may rely on Office 365 for internal communications, use Mailchimp for marketing campaigns, and have a CRM that handles transactional emails. In these scenarios, it's essential to consolidate all the services into one SPF record.

Example of a Combined SPF Record (Office 365 + Mailchimp + Zoho):

v=spf1 include:spf.protection.outlook.com include:servers.mcsv.net include:zoho.com -all

Key Points to Remember:

  • Avoid creating separate SPF records; instead, combine them into one.

  • Be cautious not to surpass the limit of 10 DNS lookups. You can use tools like MXToolbox to check your SPF configuration.

Use ~all (soft fail) instead of -all (hard fail) during testing.


SPF Record Configuration for Google Workspace (Gmail)

Users of Google Workspace must grant permission for Google's mail servers to send emails on their behalf.

Sample SPF Record:

v=spf1 include:_spf.google.com -all



spf-record-example-1



SPF Record for SendGrid


SendGrid is commonly utilized for both transactional email communications and marketing initiatives.

Sample SPF Record:

v=spf1 include:sendgrid.net -all


SPF Record for Amazon SES


Amazon's Simple Email Service (SES) offers an affordable solution for sending high quantities of emails.

Sample SPF Record:

v=spf1 include:amazonses.com -all

Important:

Amazon allows the use of personalized MAIL FROM domains, which might need further setup, such as DKIM and verification for the custom MAIL FROM domain.


Validating and Testing Your SPF Record


After you have established or modified your SPF record:

To confirm that your SPF record is set up properly, begin by utilizing an SPF validation tool such as MXToolbox or Dmarcian to examine its format. Then, verify if the DNS changes have propagated, which may require a few minutes to several hours. Lastly, send a test email and inspect the email headers to ensure that SPF authentication is successful.