SPF Explained: Which Servers Can Send Email for Your Domain?

The six points in the video

This is a silent video. The headings, explanations and labels below reproduce the information on screen.

1. 1

   Step 1: SPF lists authorised servers

   0:18

   Sender Policy Framework is an email authentication method.

   On-screen labels: Sending domain; Authorised servers; Receiving check.

2. 2

   Step 2: The record lives in DNS

   0:30

   Your domain publishes an SPF policy using a TXT record.

   On-screen labels: Domain DNS; TXT record; Provider instructions.

3. 3

   Step 3: Include each sending service

   0:42

   Business mail, forms and invoice tools may use different senders.

   On-screen labels: Business mailbox; Website messages; Invoice service.

4. 4

   Step 4: Use your actual provider setup

   0:54

   A record copied from another business may omit your services.

   On-screen labels: Provider documentation; Current sender list; Correct domain.

5. 5

   Step 5: Check real outgoing messages

   1:06

   Ask your provider to verify authentication on delivered test mail.

   On-screen labels: Mailbox test; Form-message test; Authentication result.

6. 6

   Step 6: Keep the sender list current

   1:18

   SPF is one part of delivery; DKIM and DMARC have related roles.

   On-screen labels: New sender review; Remove unused senders; Related protections.

See it in a diagram

Read the diagram as text

1. SPF: Is this sending server authorised?
2. DKIM: Does the digital signature verify?
3. DMARC: Does authentication align with From?

Check every legitimate sending service. Business mail, website forms and invoice tools may use different senders.

Authentication helps delivery; it does not guarantee inbox placement.

Diagram by Jersey Web. Open full size · Source and further detail (opens in a new tab)

Common questions

Go further