Glossary

SPF (Sender Policy Framework)

SPF (Sender Policy Framework)

SPF, or Sender Policy Framework, is an email authentication protocol that helps inbox providers verify whether an email claiming to come from your domain is being sent by a server you’ve authorized. 

It works by publishing an SPF record in your domain’s DNS, which lists all IP addresses or domains that are allowed to send email on your behalf. When an email arrives, the recipient’s server checks the SPF record to see if the sending server is legit. 

If it matches, the email passes SPF. 

If it doesn’t, the email may be flagged or rejected. 

Note: SPF only protects the Return-Path (envelope sender), not the visible “From” address. That’s why SPF on its own is not enough to stop spoofing – it needs to be used with DMARC for full protection. 

SPF is one of the big three authentication protocols, alongside DKIM and DMARC. Without it, your emails are more likely to be filtered, flagged, or outright blocked. 

Create beautiful, responsive emails in minutes.

Email made easy.