SPF fix
How to Set Up SPF for Google Workspace
This page shows the one SPF include Google wants — one lookup, all their outbound IPs.
Add this to your SPF TXT
v=spf1 include:_spf.google.com ~all
Steps
Step 1 Check existing SPF record via DNS Preflight
Step 2 Add include:_spf.google.com to your TXT record
Step 3 Verify with DNS Preflight — SPF should show pass for Google IPs
Step 4 For full alignment also enable DKIM in Google Admin — see DKIM for Google Workspace
Check SPF and lookups
Open DNS Preflight →FAQ
What is the Google Workspace SPF include?
include:_spf.google.com — covers all Google sending IPs with a single include.
Does Google Workspace SPF alignment work automatically?
Yes if your From: domain matches your Workspace domain. SPF alignment passes when the Return-Path is @yourdomain.com.
How many lookups does Google's SPF use?
include:_spf.google.com typically uses 3-4 lookups internally. Use DNS Preflight to see the exact expansion.
Do I need SPF if I already have DKIM?
DMARC only requires one of SPF or DKIM to align. But having both is best practice and required by Gmail for bulk senders.
What if I use both Google Workspace and another provider?
Add both includes in one SPF record: v=spf1 include:_spf.google.com include:sendgrid.net ~all