SPF (Sender Policy Framework) tells receiving mail servers which servers are authorized to send email on behalf of your domain. An accurate SPF record improves deliverability and helps protect your domain against spoofing. This article shows you the standard SPF record for Exact Hosting email and how to add or update it in the three places it most commonly lives.
About SPF and Exact Hosting email
An SPF record is a TXT record in your domain's DNS. When a remote mail server receives a message that claims to be from your domain, it checks your SPF record to confirm the sending server is on the approved list. If it is, the message is more likely to land in the inbox; if it is not, the message may be marked as spam or rejected.
For most Exact Hosting email customers, the correct SPF record is:
v=spf1 include:spf.exacthosting.com ~all
Note: You can only have one SPF record per domain. Multiple SPF records cause DNS conflicts and will not resolve correctly. The Exact Hosting DNS platforms also enforce a 255-character limit on a single TXT value, so your SPF record must stay under that limit.
Before you begin
- Access to your Exact Hosting account or DNS host. You need to be able to edit TXT records for the domain you are setting up.
- A list of every service that sends email as your domain. If you send through Exact Hosting plus another provider, for example a marketing platform, you may need a custom include in your SPF record.
- Confirmation that no SPF record already exists. If one is already in place, contact Exact Hosting Support before adding a second.
Warning: If you already have an SPF record or see more than one, do not add another. Contact Exact Hosting Support so we can help you merge them into a single valid record.
Step 1: Add the SPF record through DNS Management
Use this method if your domain uses Exact Hosting's DNS Management.
- Sign in to the Exact Hosting portal.
- Select Domains > My domains.
- Click the row for the domain you want to update.
- From the domain overview, select DNS management.
- Confirm no SPF record already exists, add the new TXT record, and click Save changes.
Step 2: Add the SPF record through cPanel DNS
Use this method if your domain's DNS is managed inside a cPanel hosting plan.
- Sign in to the Exact Hosting portal.
- Select Services > My services.
- Select your cPanel plan from the list.
- Click Log in to cPanel from the side navigation.
- Choose Zone editor.
- Click Manage next to the domain you are updating.
- Confirm no SPF record exists, then click + Add record and choose Add "TXT" record.
- Enter your domain name in the name field, paste the SPF record into the record field, and click Save record.
Step 3: Add the SPF record through DNS Hosting Service
Use this method if you have an Exact Hosting DNS Hosting Service plan.
- Sign in to the Exact Hosting portal.
- Select Services > My services.
- Click DNS hosting service to open the overview.
- Select Host records.
- Insert the SPF record and click Submit.
SPF record syntax
An SPF record is built from a version tag, one or more mechanisms that identify approved senders, and an all qualifier that decides what happens to everything else.
| SPF part | What it does |
|---|---|
| v=spf1 | Identifies the TXT record as an SPF record. Must appear at the start of the value. |
| a | Authorizes the domain's A record as a valid sending source. Not included in the Exact Hosting default. |
| mx | Authorizes the domain's MX records as valid sending sources. Not included in the Exact Hosting default. |
| include: | Authorizes another domain's SPF record. The Exact Hosting default uses include:spf.exacthosting.com. |
| -all | Hard fail. Mail from any sender not listed will be rejected and the sender receives a bounce. |
| ~all | Soft fail. Mail from any sender not listed will be delivered but flagged as suspicious. This is the safer default. |
Tip: If you are unsure between -all and ~all, use ~all. It still tells receivers the message is unauthorized but avoids rejecting legitimate mail while you verify your sender list.
SPF configuration examples
| Goal | Example record | What it does |
|---|---|---|
| Allow a single IPv4 address | v=spf1 ip4:209.59.191.64 -all | Only mail from 209.59.191.64 is delivered. All other senders are rejected. |
| Allow a range of IPv4 addresses | v=spf1 ip4:192.168.0.0/16 -all | Allows mail from any IP between 192.168.0.0 and 192.168.255.255. |
| Allow a specific mail server | v=spf1 mx:mx1.domain.com -all | Only mail from mx1.domain.com is delivered. All other senders are rejected. |
| Combine multiple authorized senders | v=spf1 a mx ip4:209.59.191.64 mx:mx1.domain.com -all | Allows the domain's A and MX records, a specific IP, and a named mail server. |
| Block the domain from sending any email | v=spf1 -all | All mail claiming to be from this domain is rejected. |
| Allow a single IPv6 address | v=spf1 ip6:1080::8:800:200C:417A -all | Only mail from that IPv6 address is delivered. |
| Allow a range of IPv6 addresses | v=spf1 ip6:1080::8:800:200C:417A/96 -all | Allows mail from any IPv6 address in the /96 range. |
| Include another domain's senders | v=spf1 include:anotherdomain.com -all | Authorizes any server listed in anotherdomain.com's SPF record. That record must itself be valid. |
Next steps
- Verify your SPF record propagated. Use a public DNS checker to confirm the new TXT record is visible. Propagation can take up to 24 hours.
- Add DKIM. Complete your authentication setup with a DKIM signature. See Setting Up DKIM for Exact Hosting Email.
- Set up DMARC for stronger protection. SPF works best alongside DKIM and DMARC. See Understanding Gmail, Microsoft, and Yahoo DMARC Requirements for Hosted Email.
- Review your email deliverability practices. See Exact Hosting Email Deliverability Best Practices for a full checklist.
Questions? Contact Exact Hosting Support.
How helpful was this article?
Thanks for your feedback!
Do you still need help? If so please submit a request here.