FmindSecurity guide
Authorized email senders (SPF)
SPF lists the services allowed to send email for your domain. Without it, or with several conflicting SPF records, criminals can more easily send emails in your name, and your genuine emails are more likely to land in spam.
Who can help
Your email administrator and DNS manager
Inspect before changing
Use these steps for a website or email domain you manage. Complete the capitalized placeholders with your own values. If a step refers to saved evidence, run the free check and verify your domain to open the private report. Use the exact hostname or DNS query name shown there.
- Confirm the sending domain and list every legitimate sending service, including forms and newsletters. Read its existing TXT records and keep a single SPF policy; your mail (MX) provider is not necessarily your only sender.
dig +time=3 +tries=1 TXT YOUR_SENDING_DOMAINWhat to do
List every service that sends email for you: your mailbox provider, but also website forms, newsletters, invoicing or booking tools. Keep exactly one SPF record that covers all of them, using the values each provider documents; merge duplicates instead of adding a second record. Don’t replace existing entries with a strict “block everything” record, or your legitimate emails may be rejected.
How to verify the change
Once the DNS change has taken effect, run this check again: this item should show Good. Then send a test email from each service and check that the received message’s headers show spf=pass.
Step-by-step email setup
What this check can establish
We check that one SPF record exists for your email domain, how it treats senders it does not list (its “all” ending) and whether it stays within 10 DNS lookups, following the services it includes. We don’t check its full syntax or test whether a given sender is allowed.