Microsoft 365/Exchange SPF setup
Sender Policy Framework (SPF) is an email authentication method designed to prevent spoofing by specifying which mail servers are authorized to send email on behalf of your domain. Implementing SPF helps ensure your emails reach recipients reliably and securely. Learn more about SPF here.
Exchange Online, part of Microsoft 365, is a cloud-based email service that leverages SPF as part of its email authentication process.
Microsoft 365 SPF Requirements
To authorize Microsoft to send mail on your behalf using SPF, you will need to update your SPF entry in your DNS with the following:
| Include String |
|---|
include:spf.protection.outlook.com |
This will result in an SPF record that resembles the following (note that you may have other providers SPF mechanisms in your SPF):
| SPF Record Example |
|---|
v=spf1 include:spf.protection.outlook.com include:spf.anotherprovider.com -all |
How to update your SPF record using Sendmarc
To update your SPF using Sendmarc, please follow the steps provided here.
Mircosoft’s Documentation
Microsoft’s official documentation can be found here:
https://learn.microsoft.com/en-us/defender-office-365/email-authentication-spf-configure