Using a softfail or “relaxed” mode can lower your risk of blocking legitimate email. Warning: if you do not set your SPF alignment correctly, third-party mailing services may fail SPF validation checks. SPF records can be prefixed with a mechanism to determine if an email server will fail the SPF record check if the record is not aligned (i.e., you’re using a subdomain):Īddional examples of more elaborate SPF records can be seen at DmarcAnalyzer. V=spf1 include: include: include:_ include:_ include:_ -all # If you combine all the services above, it can look like this: # Salesforce uses the following default value: #If you're using Gmail, this is your default value: # If you're using Office 365 in Germany, the default looks like this: # Here is a the default SPF record if you're using Office 365: Here are a few examples of SPF records: # SPF records exist at the root of your domain as a TXT record created at the root of the email domain. In a nutshell, it’s DNS TXT record with a list of mail servers that you use.

SPF is a DNS based email authentication protocol where you specify which email servers are allowed to use your domain name to send email. But let’s take a step back and talk about two other protocols first: Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM). Last month, Microsoft announced that anyone with an active Office 365 subscription can configure Valimail for DMARC monitoring for free! Great! But what the heck does that mean? In simple terms, it means you can eliminate 40-70% of phishing and spoofing attacks on your domain, and you’re going to help make the Internet a safer place.

How to add office 365