How to set up SPF
SPF lists who may send email for your domain, so receivers can spot fakes.
Why it matters
Without SPF, anyone can send email pretending to be you, and your real emails are more likely to land in spam. Gmail and Yahoo now require it for bulk senders.
Steps
- Find your mail provider's SPF include value in their help pages.
- Add one TXT record on your domain starting with v=spf1.
- End it with ~all, and keep only one SPF record per domain.
For your developer
v=spf1 include:_spf.google.com ~all
Check it worked
DNS changes can take up to a few hours. Then rescan, or send an email to a Gmail account and choose "Show original": SPF should read PASS.
Not sure if this affects your site?
Run a free scan to see exactly which of these your website needs.