Notification

Duet AI is now Gemini for Google Workspace. Learn more

Define your SPF record

Protect against spoofing & phishing, and help prevent messages from being marked as spam

An SPF record identifies the mail servers and domains that are allowed to send email on behalf of your domain. Receiving servers check your SPF record to verify that incoming messages that appear to be from your organization are sent from servers allowed by you.

Domains can have one SPF record. However, the SPF record for a domain can specify multiple servers and third parties that are allowed to send mail for the domain.

Set up SPF

Set up SPF by adding a DNS TXT record at your domain provider.

SPF record: Google Workspace only

If all email from your organization is sent using Google Workspace only, copy this line of text for your SPF record:

v=spf1 include:_spf.google.com ~all

Next steps

Go directly to the next step, Add your SPF record at your domain provider.

SPF record: Google Workspace plus other senders

If you send mail with other servers or third-party services in addition to Google Workspace, create a custom SPF record that authorizes these senders. If you’re not sure what these services are, review Identify all email senders for your organization, in Before you set up SPF.

Your SPF record should include a reference to Google Workspace, and to the domains and IP addresses of all servers or services that send mail for your domain.

Example SPF records: Google Workspace plus other senders

Here are example SPF records for common email setups that use Google Workspace and other senders. Every example includes _spf.google.com, which is required to send mail with Google Workspace.

Start with this SPF record for Google Workspace, then add the information for your other senders:

v=spf1 include:_spf.google.com ~all

Important: The IP addresses and domain names used in this table are examples. Replace them with IP addresses and domains for your senders.

Example SPF record Description
v=spf1 ip4:192.168.0.0/16 include:_spf.google.com ~all

Authorizes these email senders for your domain:

  • Any server with an IP address between 192.168.0.0 and 192.168.255.255
  • Google Workspace
v=spf1 ip4:192.168.0.0/16 include:_spf.google.com include:sendyourmail.com ~all

Authorizes these email senders for your domain:

  • Servers between 192.168.0.0 and 192.168.255.255
  • Google Workspace
  • Third-party service Sendyourmail
v=spf1 a:mail.solarmora.com ip4:192.72.10.10 include:_spf.google.com ~all

Authorizes these email senders for your domain:

  • Server mail.solarmora.com
  • Server with IP address 192.72.10.10
  • Google Workspace
v=spf1 include:servers.mail.net include:_spf.google.com ~all

Authorizes these email senders for your domain:

  • Third-party email service with server servers.mail.net
  • Google Workspace

Next steps

After you’ve created the SPF record for your domain, add your SPF record at your domain provider.

Was this helpful?

How can we improve it?
Search
Clear search
Close search
Main menu
5906616104800868970
true
Search Help Center
true
true
true
true
true
73010
false
false