How to configure SPF
This guide explains what the Business Email SPF record is, how to add it without creating a duplicate, and how to combine it when other services also send mail for your domain.
Before you begin
- The DNS provider for your domain. Read Find your DNS provider.
- A list of the current TXT records on the domain, from
dig TXT yourdomain.com +short. - A list of any other services that send mail for your domain, such as a website form or a marketing tool.
Steps
- Open the DNS records of your domain at your DNS provider.
- Look for an existing TXT record that starts with
v=spf1. - If none exists, add the Business Email SPF record shown below.
- If one exists, combine the values into one record, as described in the rules below. Do not create a second record.
- Save the changes and check the result.
Business Email SPF record
| Type | Host | Value |
|---|---|---|
| TXT | @ | v=spf1 include:_spf.apncloud.com -all |
If you are not sure how to enter @ as the host, see How to add MX records.
Removing a service from SPF
If you remove an include: entry for a service that still sends mail, that service's messages may be rejected or marked as spam.
Rules for SPF
- Use one SPF record per domain. A domain with two SPF TXT records fails SPF checks.
- Do not add a duplicate record if one already exists. Edit the existing record instead.
- Combine, do not blindly replace. If other services send mail for your domain, keep their
include:entries in the same record. Get their include value from their documentation.
For example, a domain that also uses another service would use one record like this:
v=spf1 include:_spf.apncloud.com include:<other-service-spf-host> -allReplace <other-service-spf-host> with the value that service gives you. Keep only one v=spf1 record.
SPF also has a DNS-lookup limit, including nested lookups from included services. A combined record can still fail if it exceeds the limit. Review changes with the sending services instead of flattening provider addresses into a static list that can become stale.
Check the record
dig TXT yourdomain.com +shortConfirm that exactly one line starts with "v=spf1.
Expected result
The lookup shows one SPF record that includes _spf.apncloud.com, and Business Email mail passes SPF checks.
If something goes wrong
- There are two SPF records. Combine them into one. Two
v=spf1records make SPF fail. - Mail from another service is rejected. Check that you did not remove that service's
include:entry. - Authentication errors continue. Read Email authentication errors.
Related articles
Last reviewed
2026-10-28