How to set up SPF on SendGrid

Step by step SPF setup for SendGrid: complete instructions, examples, verification commands, and common pitfalls.

Want to check your domain while following this guide?

Run a free SPF, DKIM and DMARC check on your domain to see exactly what is passing and what needs fixing.

No signup required. Works on any domain.

This is a reference guide for configuring SPF on SendGrid. Use it while editing DNS or when troubleshooting deliverability.

Tip: Avoid common mistakes: follow these steps to add SPF on SendGrid. Then verify everything with the InboxGreen Free Checker.

Provider-specific notes for SendGrid

  • SendGrid domain authentication uses CNAME records for DKIM and a branded mail-from subdomain - not a plain TXT SPF record. Follow the exact records from SendGrid's UI.
  • If you send from SendGrid alongside another provider, you still need both providers in a single SPF record. Merge the includes, do not create two SPF TXT records.
  • SendGrid → Settings → Sender Authentication → Domain Authentication.

What you’ll need

  • Access to your DNS provider (for example, Cloudflare, Namecheap, GoDaddy).
  • Access to SendGrid admin where you can confirm the services that send mail.

Add or update SPF

SPF is a single TXT record published at host @ that lists all systems allowed to send mail for your domain. If you already have an SPF record, edit it instead of adding a second one.

For SendGrid, a typical SPF looks like:
v=spf1 include:sendgrid.net ~all
If you also use another sender (for example, SendGrid), the combined record might be:
v=spf1 include:_spf.google.com include:sendgrid.net ~all
  1. Open your DNS provider and locate the existing TXT record at host @ that contains v=spf1.
  2. If it exists, edit its value and merge includes. If it does not exist, create a new TXT record:
    • Type: TXT
    • Name/Host: @
    • Value: v=spf1 include:sendgrid.net ~all
  3. Prefer ~all while you are testing. Move to -all only when you are certain all real senders are covered.
  4. Save and wait for DNS propagation (often a few minutes, sometimes longer).

Verify SPF

Use any of these:

  • Run the InboxGreen checker on your domain.
  • Command line:
    dig TXT yourdomain.com +short
    nslookup -type=txt yourdomain.com

Common mistakes

  • Multiple SPF records instead of one. Always merge mechanisms into a single record.
  • Placing the record on www instead of the root @.
  • Forgetting secondary senders such as marketing or transactional tools.
  • Switching to -all too early and blocking legitimate traffic.

Pro tip: Turn on InboxGreen Monitoring to check these records daily and get alerts if something breaks.

Free Deliverability Scan

Check SPF, DKIM, DMARC and List-Unsubscribe for your domain in seconds.

Useful tools