Browse the Learning Center
SPF
Records, include chains, the 10-lookup limit, PermError fixes.
21 guides
Read in order
Get to p=reject
The full route from an unprotected domain to an enforced policy, in the order the work actually happens.
5 steps
The three records
SPF, DKIM and DMARC explained in the order they make sense — start here if the acronyms are new.
3 steps
Add a sending platform
Authorise a new ESP without breaking the authentication you already have.
3 steps
All SPF guides
Why does Gmail report an SPF error?Diagnose why Gmail reports an SPF error, including the exact SPF identity Gmail checked, common causes, safe repairs, and validation steps.
Why does Mailchimp DMARC alignment not require adding Mailchimp to SPF?Learn why Mailchimp marketing email can pass DMARC through aligned DKIM without adding Mailchimp to your visible From domain's SPF record.
How do I set up SPF and DKIM for Customer.io?Set up Customer.io SPF and DKIM with the current sending-domain workflow, account-specific DNS records, DMARC alignment checks, and troubleshooting.
How do I set up SPF and DKIM for Mailchimp?Authenticate a Mailchimp sending domain with the current Entri or manual workflow, two DKIM CNAME records, DMARC, and delivered-message checks.
How do I set up SPF and DKIM for SendGrid?Set up SendGrid SPF and DKIM with Domain Authentication, automated or manual security, account-specific DNS records, and DMARC validation.
How do I fix SPF PermError: too many DNS lookups?SPF PermError: too many DNS lookups means your record needs more than 10 DNS queries. Here is how to count your lookups and get back under the limit.
How do I set up SPF for Google Workspace?Google Workspace SPF setup: publish one TXT record — v=spf1 include:_spf.google.com ~all — at your domain root, merge other senders, and verify it resolves.
How do I set up SPF and DKIM for Brevo (formerly Sendinblue)?Set up Brevo (ex Sendinblue) email authentication: DKIM CNAME or TXT records, the spf.brevo.com include, DMARC alignment, and fixes for common errors.
How do I set up SPF and DKIM for HubSpot?Set up SPF and DKIM for HubSpot: connect your sending domain, add both hs1/hs2 DKIM CNAMEs and your account-specific SPF include, then verify DMARC.
How Do I Set Up SPF and DKIM for Mailgun?Mailgun SPF and DKIM setup: add the include:mailgun.org TXT record and DKIM key, verify your domain, and keep DMARC alignment on a mg. subdomain.
How Do I Set Up SPF and DKIM for Postmark?Postmark handles SPF via its Return-Path, so skip the include. Real setup: one DKIM TXT record plus a custom Return-Path CNAME for DMARC alignment.
SPF record syntax explained: mechanisms and qualifiersSPF record syntax explained: every mechanism (a, mx, include, ip4, all) and qualifier (+ - ~ ?), how they evaluate, and the 10-lookup limit that breaks records.
Why do phishing emails pass SPF and DKIM checks?Phishing emails pass SPF and DKIM because authentication proves which domain sent a message, not whether it is honest. Here is what actually stops them.
How do I set up SPF and DKIM for Klaviyo?Set up SPF and DKIM for Klaviyo with a branded sending domain: add the CNAME or NS records, verify, and activate — plus the DMARC step Klaviyo skips.
Will La Poste require SPF, DKIM and DMARC for all senders?La Poste will require SPF, DKIM and DMARC starting September 2025. Here’s what senders must do to keep emails out of spam.
How do I set up SPF and DKIM for Zoho Campaigns?Learn how to configure SPF and DKIM for Zoho Campaigns with Palisade's guide. Follow simple steps to improve email authentication and protect your brand.
How Do I Set Up SPF and DKIM for Amazon SES?Learn how to set up SPF and DKIM in Amazon SES, verify domains, add DNS records, and ensure email authentication passes DMARC.
How can I configure SPF and DKIM for ChargeBee?Learn how to configure SPF and DKIM for ChargeBee with detailed SMTP setup instructions and quick FAQs.
How to Set Up DMARC, SPF, and DKIM on DreamHostDMARC (Domain‑based Message Authentication, Reporting & Conformance) tells receiving mail servers how to handle unauthenticated mail from your domain.
What’s the difference between DKIM and SPF and why does it matter?SPF (Sender Policy Framework) is a path‑based authentication method that checks whether the sending server’s IP address is authorized to use the domain in…
What is SPF? Sender Policy Framework ExplainedExplore SPF, the email authentication tool that prevents domain spoofing.