> For the complete documentation index, see [llms.txt](https://docs.emaillabs.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.emaillabs.io/en/security-center/email-sending-security-and-authorization/spf-sender-policy-framework.md).

# SPF (Sender Policy Framework)

**SPF (Sender Policy Framework)** is a basic email authentication mechanism that helps protect your domain against unauthorized use (spoofing). It works like a public "whitelist" of servers authorized to send mail on behalf of your domain. It allows the domain owner to specify which mail servers are permitted to send email from that domain.

## **How does SPF work?**

A domain owner publishes a special record (a TXT record) in their DNS settings, which contains a list of IP addresses or domains of mail servers authorized to send from that domain. When a recipient's server receives a message, it checks the sender's domain, queries its DNS for the SPF record, and verifies if the sending server's IP address is on the authorized list.

## **Why is SPF important?**

* **Protection against phishing:** It significantly complicates impersonation using your domain.
* **Increased credibility:** A positive SPF verification is a signal to recipient servers that the message is authentic.
* **Better deliverability:** It is one of the fundamental standards checked by anti-spam filters. Its absence or incorrect configuration can lead to your messages being rejected or placed in the spam folder.

## **SPF Configuration for EmailLabs**

You have two methods for configuring SPF to authorize our servers to send messages on your behalf:

### **Recommended Method: Dedicated Return Path** 

The recommended and simplest method to ensure SPF compliance is to configure a **"Dedicated Return Path."** With this approach, EmailLabs automatically manages the SPF record for your dedicated return subdomain, simplifying the setup on your end and ensuring the SPF record is always correct and up-to-date.

* **Learn more:** [Advanced Settings for Sender Authorization (Dedicated Return Path)](https://newpanel.docs.emaillabs.io/en/common-settings/sender-domain-authorization/advanced-settings)

### **Alternative Method: Direct TXT Record Configuration**

If you prefer to directly manage the SPF record for your main domain (or the subdomain used in the "From" address) via a TXT record, the following instructions will help you. This requires manually adding or updating the TXT record in your domain's DNS settings.

* **Detailed instructions:**
  * [How to configure SPF if you don't have an SPF record yet](https://newpanel.docs.emaillabs.io/en/first-steps/spf-record/if-you-dont-have-an-spf-record)
  * [How to configure SPF if you already have an SPF record from another service](https://newpanel.docs.emaillabs.io/en/first-steps/spf-record/if-you-have-an-spf-record-from-another-service)