How to Set Up SPF Record for Google Workspace (Step-by-Step 2025)

Google Workspace accounts use Google's mail servers to send email on your behalf. Without an SPF record authorizing Google's servers for your domain, receiving mail servers cannot verify that your Workspace emails are legitimate — leading to spam placement or rejection. Here is the exact record to add and how to verify it.

The SPF Record for Google Workspace

Add this TXT record to your domain's DNS:

• Type: TXT
• Host / Name: @ (represents your root domain)
• Value: v=spf1 include:_spf.google.com ~all
• TTL: 3600 (1 hour) or your registrar's default

If you also send from other services (a marketing platform, CRM, or transactional email provider), add their includes before the ~all: for example v=spf1 include:_spf.google.com include:sendgrid.net ~all. Never create more than one SPF TXT record on the same domain — merge all includes into a single record.

Where to Add SPF Records by Registrar

Google Domains / Squarespace Domains

DNS → Manage custom records → Add record. Type: TXT, Host: @, Data: the SPF value above.

Cloudflare

DNS → Add record. Type: TXT, Name: @ (or your domain), Content: the SPF value. Set proxy status to "DNS only" (grey cloud).

AWS Route 53

Hosted zones → your domain → Create record. Type: TXT, Record name: leave blank for root, Value: wrap the SPF string in double quotes.

How to Verify SPF Is Working

• Wait 15–60 minutes for DNS propagation after adding the record
• Use MXToolbox SPF Lookup: enter your domain and check that it shows Google's servers as authorized
• Send a test email to a Gmail address and check the email headers: look for spf=pass in the Authentication-Results header
• In Google Workspace Admin: Apps → Google Workspace → Gmail → Authenticate email — should show "Email authenticated"

SPF is the first authentication record to configure. After SPF is passing, set up DKIM (in Google Admin Console → Apps → Gmail → Authenticate email → Generate DKIM), then DMARC. All three together are required for consistent Gmail inbox placement in 2025.

Send like the inbox is yours.

Join the waitlist and lock in founding-member pricing.