SPF (Sender Policy Framework) is an email authentication method designed to prevent unauthorized senders from using your domain. It helps safeguard your brand from spoofing and phishing attacks by validating the servers allowed to send emails on your behalf.
This guide walks you through configuring SPF for Microsoft 365 Exchange, Microsoft’s cloud-based email and productivity platform.
Note: If you’re already using Sendmarc to manage your SPF record, simply copy ‘include:spf.protection.outlook.com -all’ and follow the steps here.
To authorize Microsoft 365 to send emails on your domain’s behalf:
Example of an updated SPF record:
Host | Type | Value |
---|---|---|
@ or blank | TXT | v=spf1 include:another.net include:spf.protection.outlook.com -all |
Example of a new SPF record:
Host | Type | Value |
---|---|---|
@ or blank | TXT | v=spf1 include:spf.protection.outlook.com -all |
Allow up to 48 hours for DNS propagation, depending on your DNS host.
For detailed instructions on how to update your SPF record through Sendmarc, refer to the Sendmarc SPF Setup Documentation.
Refer to Microsoft 365’s official documentation for SPF setup here.
Find out how to configure your Microsoft 365 DKIM settings here.