Learning Hub · Intermediate · 15 minutes
How to Create an SPF Record
Everything you need to declare who may send email as your domain — the steps, the gotcha, and the tip the support desk gives everyone.
The short answer
In one line: declare who may send email as your domain — a intermediate-level job taking 15 minutes.
Below: the exact steps, the classic pitfall, and a pro tip from the support desk. Where our platform automates a step, the guide says so rather than making you do robot work.
Intermediate
Skill level
5
Steps to done
Free
Support included
Tested
On our platform
You don't need to be technical for this — the walkthrough is written for first-timers, tested against our own platform, and honest about which parts are genuinely fiddly versus merely unfamiliar.
Rule of the road: read the gotcha section before you begin, not after — it's harvested from the support tickets of people who didn't.
The shape of the job
Start to finish, you'll inventory every legitimate sender, compose the single txt record, publish at the domain root, mind the lookup budget and verify with a checker.
None of the stages requires code or a terminal unless the guide explicitly says so — and where it does, the exact commands are given. The full step-by-step sits below; the surrounding sections cover the context that makes it stick.
The mistake almost everyone makes
Creating a second SPF record for a new service instead of editing the existing one — duplicate SPF equals no SPF, and deliverability quietly degrades while both records look individually correct.
Forewarned is genuinely forearmed here — this exact mistake accounts for most of the frustration this topic produces, and it's entirely avoidable once named.
The tip we give everyone
End with ~all (softfail) rather than -all until DKIM and monitoring confirm the inventory is complete — strictness is the last step, not the first.
Small habits like this are the real difference between people who find hosting easy and people who find it stressful — the tools are identical; the workflow isn't.
The parts you can skip on our hosting
We've automated the steps that don't deserve your time: certificates issue and renew themselves, the installer handles application setup, daily backups cover the what-if, and per-site settings live in a panel instead of config files. The guide above covers what's left — the part that's actually about your site.
And when a step misbehaves anyway, support answers around the clock — with the actual fix, not a knowledge-base link and a shrug. Half our best guides started as patterns in the tickets.
Guides are easier on a good platform
Every walkthrough in our Learning Hub is tested on the platform we actually run — cPanel, LiteSpeed, NVMe, one-click installs — so instructions match your screen instead of gesturing at it.
NVMe storage and LiteSpeed caching are standard here, not premium-tier extras.
- Step-by-step, tested as written
- The gotcha flagged before you hit it
- Automation covers the boring steps
- 24/7 support if you get stuck
Why HostingAlly
What you get with every plan
No jargon tax
Terms are explained in place or linked to the glossary — nothing assumes you already know.
The undo is always named
Where a step could bite, the guide says so and gives the reversal.
Automation where it belongs
SSL, backups and installs run themselves here — the guide covers only what's genuinely yours to do.
Works as written
Every step tested on our own platform — no 'your host may vary' hand-waving.
Help on standby
Stuck at step three at midnight? Support answers around the clock, mid-guide included.
Written from real tickets
Our guides come from the support desk — the gotchas are the ones people actually hit.
Getting Started
How to get going
- 1
Inventory every legitimate sender
Hosting mail, newsletter platform, CRM, invoicing tool — anything sending as you@yourdomain belongs in the record; the audit is the hard part.
- 2
Compose the single TXT record
v=spf1 followed by include: mechanisms per service and your host's servers, ending ~all — each service documents its exact include string.
- 3
Publish at the domain root
One TXT record on @ — one, singular; a second SPF record doesn't extend the first, it invalidates both.
- 4
Mind the lookup budget
SPF allows ten DNS lookups total; nested includes from many services approach it fast — flattening or pruning keeps validation working.
- 5
Verify with a checker
An SPF validation tool confirms syntax and lookup count; a test mail to a checker address shows the pass in headers.
Included
What's covered on our plans
- LiteSpeed server-level caching
- 99.9% uptime commitment, monitored around the clock
- cPanel — the industry-standard control panel
- DDoS protection at the network level
- Email accounts on your own domain
- No setup fees, ever
- One-click installer for WordPress and 400+ apps
- Per-site PHP version selection
- SSH, Git and Composer access on developer-friendly plans
- Renewal prices that match signup prices
FAQ
Your questions, answered
What does SPF actually prevent?
It lets receiving servers check whether the sending server was authorised by your domain — raising the cost of simple spoofing and feeding DMARC's decisions. It's one leg of the SPF/DKIM/DMARC tripod, not a complete defence alone.
My newsletters fail SPF even though I added the include — why?
Usually the platform sends from its own envelope domain (SPF passes on theirs) and alignment fails on yours — the fix is the platform's custom-domain/DKIM setup, which aligns signing with your domain properly.
What happens if I outgrow my plan?
You upgrade in place — plan changes apply from your client area without migrations or downtime, and our range runs from small shared plans through VPS to dedicated servers, so growth is an account change rather than a new-host project.
How long does it take to get started?
Minutes — hosting activates on payment, the domain (free for year one on annual plans) connects immediately, and one-click installers put WordPress or 400+ other apps live the same sitting. If you have an existing site, our team migrates it free, usually within 24 hours.
Can I host more than one website on a plan?
On the Pro tier and above, yes — multiple sites with their own domains, email and SSL under one account. If the extra sites belong to clients rather than you, reseller hosting gives each one proper isolation instead.
Is SSL really included at no cost?
On every plan, with no exceptions — certificates are issued automatically when your domain points to us and renew themselves before expiry. The encryption is identical to paid DV certificates; paid tiers exist only for wildcard convenience or organisation-level validation.
Are backups included, and can I restore them myself?
Daily automatic backups are standard, restorable from the panel in minutes — files, databases or both, at 3am without a ticket if that's when you need it. For extra cover, you're welcome to run your own offsite copies alongside.
Keep exploring
How to Set Custom Error Pages
Turn dead ends into branded, useful detours — beginner level, 30 minutes.
How to Upload Files With File Manager
Move files to your site without any FTP client — beginner level, 10 minutes.
Web Hosting
NVMe cPanel hosting with free SSL, migration and a free first-year domain.
Domain Names
Search, register and transfer domains — first year free on annual hosting.
Your site deserves better hosting.
Free SSL, free migration, honest renewals and 24/7 human support. That's the whole pitch.
See Hosting Plans