Skip to main content

Security fix guide

How to Fix a Missing SPF Record

A missing SPF record means your domain does not publish which mail servers are allowed to send email for it.

Run Full Website Security Scan

What the issue means

A missing SPF record means your domain does not publish which mail servers are allowed to send email for it.

Why it matters

SPF helps receiving servers evaluate whether mail from your domain came from an authorized source.

How to check it

Query your root domain TXT records for a value beginning with v=spf1.

How to fix it

Publish an SPF record listing your legitimate email providers and keep DNS lookup limits below 10.

Configuration examples

Nginx
DNS record, not an Nginx setting.
Apache
DNS record, not an Apache setting.
Cloudflare
Add a TXT record on the root domain, for example v=spf1 include:_spf.google.com ~all.

Related fix guides