Publish a correct SPF record
Email · about 15 min
In plain words
SPF is a DNS record listing the services allowed to send email as @yourdomain. Receivers use it to spot forgeries.
What can go wrong
Without SPF — or with "+all" / "?all" — scammers can send convincing invoices and password-reset emails as you.
How to fix it
Pick the platform your site runs on. Not sure? Forward this page to whoever manages your website.
DNS record
Type: TXT Name: @ Value:
v=spf1 include:_spf.google.com -allReplace the include with your mail provider(s): Google Workspace = _spf.google.com, Microsoft 365 = spf.protection.outlook.com, plus any sending service (newsletter, CRM).
Domain sends no email
Type: TXT Name: @ Value:
v=spf1 -allBefore you change anything: Keep exactly ONE SPF record per domain (merge includes into it), and stay under 10 DNS lookups. Use "~all" for the first week if unsure, then switch to "-all". Add it in your DNS provider (Cloudflare → DNS → Records, cPanel → Zone Editor, or your registrar). Changes usually take effect within minutes, sometimes up to a few hours.
Check that it worked
Re-run the ProbeHunt check, then send a test email to a Gmail account → "Show original" → SPF: PASS.