Step by step SPF setup for SendGrid: complete instructions, examples, verification commands, and common pitfalls.
This is a reference guide for configuring SPF
on SendGrid. Use it while editing DNS or when troubleshooting deliverability.
Tip: Avoid common mistakes: follow these steps to add SPF on SendGrid. Then verify everything with the
InboxGreen Free Checker.
Provider-specific notes for SendGrid
- SendGrid domain authentication uses CNAME records for DKIM and a branded mail-from subdomain - not a plain TXT SPF record. Follow the exact records from SendGrid's UI.
- If you send from SendGrid alongside another provider, you still need both providers in a single SPF record. Merge the includes, do not create two SPF TXT records.
- SendGrid → Settings → Sender Authentication → Domain Authentication.
What you’ll need
- Access to your DNS provider (for example, Cloudflare, Namecheap, GoDaddy).
- Access to SendGrid admin where you can confirm the services that send mail.
Add or update SPF
SPF is a single TXT record published at host @ that lists all systems allowed
to send mail for your domain. If you already have an SPF record, edit it instead of adding a second one.
For SendGrid, a typical SPF looks like:
v=spf1 include:sendgrid.net ~all
If you also use another sender (for example, SendGrid), the combined record might be:
v=spf1 include:_spf.google.com include:sendgrid.net ~all
- Open your DNS provider and locate the existing
TXT record at host @ that contains v=spf1.
- If it exists, edit its value and merge includes. If it does not exist, create a new
TXT record:
- Type: TXT
- Name/Host:
@
- Value:
v=spf1 include:sendgrid.net ~all
- Prefer
~all while you are testing. Move to -all only when you are certain all real senders are covered.
- Save and wait for DNS propagation (often a few minutes, sometimes longer).
Verify SPF
Use any of these:
Common mistakes
- Multiple SPF records instead of one. Always merge mechanisms into a single record.
- Placing the record on
www instead of the root @.
- Forgetting secondary senders such as marketing or transactional tools.
- Switching to
-all too early and blocking legitimate traffic.
Pro tip: Turn on InboxGreen Monitoring to check these records daily and get alerts if something breaks.
Free Deliverability Scan
Check SPF, DKIM, DMARC and List-Unsubscribe for your domain in seconds.