SPF record examples for the senders you actually use
In short: A correct SPF record is one v=spf1 line that lists all your senders and ends in a policy. For Google Workspace it is v=spf1 include:_spf.google.com ~all; for Microsoft 365 it is v=spf1 include:spf.protection.outlook.com -all. When you use several services, combine their includes into a single record. Build yours with the free SPF Generator.
On this page
Google Workspace SPF record
For a domain that sends only through Google Workspace:
v=spf1 include:_spf.google.com ~all
That single include: covers Google's sending servers. Use ~all while testing, then -all once you are confident Google is your only sender.
Microsoft 365 SPF record
For Microsoft 365 (Outlook / Exchange Online):
v=spf1 include:spf.protection.outlook.com -all
Microsoft publishes a single include that covers Exchange Online. If you also relay through on-premise servers, add their IPs with ip4: entries.
Common sending tools
Popular services and their includes:
- SendGrid:
include:sendgrid.net - Mailgun:
include:mailgun.org - Amazon SES:
include:amazonses.com - Zoho:
include:zoho.com
Add only the ones you use. Each include counts toward your 10-lookup limit.
Multi-sender example
If you send through Google Workspace and a marketing tool, combine them into one record:
v=spf1 include:_spf.google.com include:sendgrid.net ~all
Never publish two separate SPF records. The SPF Generator merges senders for you, and the SPF Checker confirms you are under the lookup limit.
Generate your exact SPF record
Pick your senders and get one correct, lookup-safe record ready to paste into DNS.
Open the SPF Generator →All free tools