Email protection

List who may send your business email

Why this matters

SPF is a public rule listing the servers allowed to send email for your domain. Without it, scammers can more easily pretend to send email as your business.

What to do

1. List every service that sends email using your domain, including your mailbox, website forms and mailing tools. Ask your email provider for the exact SPF TXT record covering these senders.
2. Open your domain's DNS settings, usually at the company you bought the domain from. DNS settings are public records for your domain. Add the supplied TXT record there; TXT means a text record. If SPF already exists, have it updated into one combined record rather than adding a second one.
3. What to tell your web developer: Please add or correct the domain's SPF TXT record using the email providers' exact instructions. Include all legitimate senders and keep a single SPF record. There is no universal SPF line suitable for every business.

How to check the fix

Allow time for DNS changes to spread, then run the checker again and look for an SPF pass. Send test emails from every service too; the checker finds a record but does not validate all its contents.