← Back to glossary

📮

SPF

Security

Phishing Email Forwarding DKIM DMARC

Sender Policy Framework: DNS-based authorization of sending IPs/hosts for a domain; used in anti-spoofing.

Definition

SPF uses DNS TXT records to declare authorized sending sources. Receivers evaluate SPF and combine results with DKIM/DMARC.

In plain English Sender Policy Framework: DNS-based authorization of sending IPs/hosts for a domain; used in anti-spoofing.

Why this matters

Why it matters: Better anti-spoofing reduces phishing and protects users from fraudulent messages.

Example

Example: Publish an SPF record for all legitimate senders and keep it updated when using third-party email services.