SPF fix
How to Set Up SPF with Multiple Email Providers
You run Workspace and SendGrid? Stuff every include into one SPF TXT — two TXT records means instant PermError.
Why two SPF TXTs cause instant PermError
- Receivers expect one v=spf1 at each name.
- Stack every include in that single string.
- Stay under the 10-lookup cap or flatten.
Two TXT records starting with v=spf1 isn’t “backup” — it’s broken.
One record, many vendors
v=spf1 include:_spf.google.com include:sendgrid.net include:spf.protection.outlook.com ~all
Merge, count, delete dupes
Step 1 List all services that send email for your domain
Step 2 Find each provider's SPF include value
Step 3 Combine into one TXT record with a single v=spf1 prefix
Step 4 Check lookup count in DNS Preflight — must stay under 10
Step 5 Delete any duplicate SPF records
Run DNS Preflight to count lookups — then open DMARC reports to spot mystery senders
Related glossary:
SPF record ·
DMARC
FAQ
Can I have two SPF records?
No — that’s PermError. Merge into one v=spf1 TXT.
How many providers can I add to one SPF record?
As many as fit in ten DNS lookups — often 3–5 includes, depends on depth.
What order should I list providers in my SPF record?
Order doesn’t change pass/fail. Put loud vendors first so humans read it easier.
How do I find all the services sending email for my domain?
Read DMARC aggregate XML — it lists IPs pretending to be you. Paste files into our DMARC Report Analyzer.
What if combining all my providers exceeds 10 lookups?
Flatten or drop a vendor — see too many lookups.