Clear search
Close search
Google apps
Main menu

Authorize senders with SPF

Configure SPF records to work with G Suite

Create an SPF record for your domain

  1. Sign in to your domain’s account at your domain host (not your Google Admin console).
    Help me identify my domain host.

  2. Locate the page for updating your domain’s DNS records. 
    This page might be called something like DNS management, Name server management, or Advanced settings.
  3. Create a TXT record containing this text: v=spf1 ~all

    Publishing an SPF record that uses -all instead of ~all provides stricter security, but may result in delivery problems. See Google IP address ranges for details about the addresses for the G Suite mail servers.

    To authorize an additional mail server, add the server's IP address just before the ~all argument using the format ip4:address or ip6:address.

    Note: Adding additional IP addresses to your SPF records increases the number of servers that are authorized to send email on your behalf, so use suitable caution when choosing what you add. (See Sender Policy Framework for more details on the SPF format and security considerations.)
  4. If your registrar also requires a host setting (such as @), see the TXT records for specific domain providers list for specific instructions.
  5. Save your changes.

Your new SPF record can take up to 48 hours to go into effect, but this usually happens more quickly.

Avoid adding multiple SPF records

Adding more than one SPF record for a domain can cause problems with mail delivery and spam classification. Instead, we recommend using only one SPF record.  For details, see Multiple SPF records.

Get help

For help creating an SPF record, contact your domain provider.

Was this article helpful?
How can we improve it?
Sign in to your account

Get account-specific help by signing in with your G Suite account email address, or learn how to get started with G Suite.