Use SPF records to prevent spoofing and ensure mail delivery
The Sender Policy Framework (or SPF record) is a type of TXT record in a domain's DNS. SPF records verify that email comes from an authorized server for the domain. After you send a message, the receiving server checks if it comes from an IP address authorized by the DNS as a safeguard against imitators.
SPF records help protect against spoofing, when spammers send fake messages that appear to be from you to trick recipients into sharing sensitive information. They also prevent your messages from being marked as spam or rejected, since your mail is verified as legitimately coming from you.
Here's how an SPF record works for Paul when he emails a customer:
- The email server with an IP address of 184.108.40.206 sends a message from email@example.com to firstname.lastname@example.org.
- The server for coolexample.com checks the SPF record for finitefashion.com.
- The SPF record for finitefashion.com allows delivery from the IP address 220.127.116.11 and the customer receives the message.
What is my SPF record?
Workspace Email, Professional Email, and Microsoft 365 from GoDaddy use the following SPF record:
v=spf1 include:secureserver.net -all
This means only servers secureserver.net allows can send mail as your domain. Receiving mail systems will check that the message comes from an allowed server before it can be delivered.
If your domain, DNS, and email are in the same GoDaddy account, we'll add the SPF record for you, and you don't need to do a thing. If they're with a third-party email or hosting provider, you'll need to manually add the SPF record. Configuring SPF records are not part of our Statement of Support and you'll need to contact the other provider for help.
How should my SPF record look?
Your SPF record might look different depending on how you want it to behave. If you send mail using multiple email services (like third-party email marketing products), your SPF record needs to include those services as well. Contact your provider to find out what their SPF record should be.
Keep in mind that your domain can only have one TXT record for SPF and that it should look similar to this. The area outlined in red is where you'll include settings for third-party products and services in addition to include:secureserver.net. To learn more about SPF record syntax, visit the SPF project.
- Add an SPF record as a TXT record.