Google Workspace SPF Record: Step-by-Step Setup Guide to Improve Email Deliverability in 2025
If you're using Google Workspace and haven’t set up your SPF record yet, you’re leaving your domain wide open to spoofing, which means anyone could fake emails using your domain.
That’s a serious risk for your brand reputation and your customers.
The fix? Add an SPF record that tells inboxes which servers are allowed to send your emails.
In this guide, I’ll walk you through how to set up your SPF record for Google Workspace — step-by-step, without needing to be technical.
In this guide, I’ll show you exactly how to:
- Add the correct SPF record for Google Workspace
- Do it on your domain registrar (like GoDaddy, Namecheap, Cloudflare, etc.)
- Test if your setup is working properly
- Avoid common mistakes (like having multiple SPF records)
- Keep your domain trusted with best practices
No fluff. Just a clear setup guide to help you send emails without worrying about spam filters.
Let’s get started.
TL;DR Summary
- Add this SPF record for Google Workspace: v=spf1 include:_spf.google.com ~all
- Only one SPF record should exist per domain
- Add it as a TXT record in your DNS settings
- Use tools like Salesforge SPF Checker, MXToolbox, or Google Admin Toolbox to test
- Avoid common issues: missing SPF, duplicate records, syntax errors, too many includes
- Use ~all (soft fail) or -all (hard fail) wisely
- Review and update your SPF record regularly
- Use Primeforge if you're managing multiple domains or want to automate the setup
What is an SPF Record and Why Does It Matter?
An SPF record is a small rule you add to your domain. It tells email services, like Gmail, Outlook, or Yahoo, that Google Workspace is allowed to send emails for you.
If you don’t have this rule, your emails might look suspicious.
Even if they’re real, they can end up in spam or not get delivered at all.
Here’s why it matters:
- It proves your emails are real. With SPF, inboxes know your email came from your domain, not a scammer.
- It keeps your domain safe. Without SPF, someone else could pretend to use your domain to send fake emails.
- It helps your emails land in inboxes. Setting up the SPF record correctly improves your email delivery and builds trust with other mail servers.
For anyone using Google Workspace, adding the Google Workspace SPF record is a must.
It’s one of the first things you should do to avoid email problems.
And don’t worry — it’s not hard.
In the next part, I’ll walk you through how to set it up, step by step.
Default SPF Record for Google Workspace
If you’re using Google Workspace for email, here’s the SPF record you need to add to your domain:
v=spf1 include:_spf.google.com ~all
This is the standard setup Google recommends. Let’s break it down so it’s easy to understand:
- v=spf1 — This just means “this is an SPF version 1 record.”
- include:_spf.google.com — This tells inboxes to trust Google’s servers to send emails for your domain.
- ~all — This says that any other servers not listed here are not allowed to send on your behalf. The “~” means “soft fail” — it will flag unauthorized senders without fully blocking them.
So, this one line basically tells email providers:
“Yes, I send emails using Google Workspace. Please allow them.”
📝 Note: This SPF record only covers Google services like Gmail.
If you also send emails through tools like Mailchimp, SendGrid, or another CRM, you’ll need to add them to the same SPF record (not create a second one).
Having multiple SPF records can cause failures, so it’s important to combine them correctly.
We’ll talk more about that later in the guide.
For now, let’s add this SPF TXT record to your domain so Google Workspace is properly authorized.
5. How to Add an SPF Record for Google Workspace: Step-by-Step
Adding an SPF record to your domain might sound like a “techie” task, but don’t worry. You don’t need to code or be an expert.
If you’re using Google Workspace to send emails from your domain (like you@yourcompany.com), this step makes sure email providers know those emails are real, and not spam.
Let me walk you through it in plain, simple steps.
Step 1: Log in to Your Domain Provider
Go to the website where you bought your domain — this could be:
- GoDaddy
- Namecheap
- Cloudflare
- Google Domains
- Or wherever you manage your domain
Log in to your account and go to the settings for the domain you're using with Google Workspace.
Step 2: Open DNS Settings
Find the section that says something like:
- “Manage DNS”
- “DNS Settings”
- “Zone Editor”
- “Advanced DNS”
This is where you control things like TXT records, which is where SPF lives.
Step 3: Add a New TXT Record
Now you’ll create the SPF record.
Here’s what to enter (don’t worry, it’s just a copy-paste job):
- Name/Host: @ (or leave it blank if @ isn’t accepted)
- Type: TXT
Value:
v=spf1 include:_spf.google.com ~all
- TTL: Leave it as default, or set it to 3600
💡 This tells email services that Google is allowed to send emails using your domain.
Step 4: Save and Wait
Once you’ve added everything, click Save or Update.
Now your changes need to spread across the internet, which can take anywhere from a few minutes to 48 hours.
That’s it. You’ve set up your Google Workspace SPF record.
✅ What Just Happened?
By doing this, you’ve:
- Helped inboxes like Gmail and Outlook trust your emails
- Reduced the chances of your emails going to spam
- Protected your domain from fake senders (spoofing)
If you also use tools like Mailchimp, SendGrid, or CRMs to send email, don’t worry, I’ll explain how to add them later without breaking your SPF setup.
✅ Use a Free SPF Record Generator
Not sure what your SPF record should look like?
You can generate it for free using a simple tool:
👉 Free SPF Record Generator by Salesforge
Just choose Google Workspace (and any other tools you send emails from), and it will build the correct SPF record for you.
Copy that, you’ll need it in the next step.
Up next: let’s check if your SPF record is working.
How to Test If Your SPF Record Is Working
After you’ve added the Google Workspace SPF record to your domain, it’s important to test if it’s working properly.
If your SPF record isn’t set up correctly, email services might still treat your messages as suspicious, even if you’ve done everything else right.
Luckily, there are free tools that let you check your SPF record in seconds.
Here are three simple tools you can use, even if you're not technical.
Salesforge SPF Checker (Free & Beginner-Friendly)
Salesforge SPF checker is one of the easiest tools to use. If you’re just starting out or want something quick and simple, this is the best place to begin.
How to use it:
- Go to the page
- Enter your domain (example: yourcompany.com)
- Click the check button
What it shows:
- Your full SPF TXT record
- Whether it's valid or not
- Any visible issues (like duplicate SPF records or invalid format)
If your SPF is good, it will say something like “SPF is valid” or “SPF record found”.
If something’s wrong, it’ll show a clear message — like "No SPF found" or "Syntax error."
You can then go back and fix your record.
✅ Why use this tool: It's super clean, fast, and doesn't overload you with technical stuff.
Pricing: Free:- Which includes creating and validating SPF records, identifying syntax errors, and optimizing email deliverability.
MXToolbox – SPF Record Lookup
MXToolbox SPF Tool is a bit more detailed. If you want to go deeper and really understand what’s going on with your SPF setup, MXToolbox is a great option.
How to use it:
- Visit the link
- Type your domain in the search bar
- Click "SPF Record Lookup"
What it shows:
- The full SPF record for your domain
- Whether it’s valid
- A detailed list of includes (like _spf.google.com)
- Any errors like:
- More than one SPF record
- Too many DNS lookups (SPF only allows 10)
- Missing IPs or senders
- More than one SPF record
✅ Why use this tool: It helps you catch deeper issues. Great if you're sending emails from more than just Google (like Mailchimp, SendGrid, etc.).
Pricing:
- Free plan: Basic SPF checks and diagnostics.
- Paid Plans:
- Delivery Center Plus: $399/month, includes advanced features like SPF flattening, email delivery performance reports, and blacklist monitoring.
Google Admin Toolbox – CheckMX
Google Admin Toolbox is made by Google, so it’s perfect if you're using Google Workspace.
How to use it:
- Visit the page
- Enter your domain
- Press enter and wait for the report to load
What it shows:
- SPF record status
- DKIM and DMARC setup (if you've added those)
- Whether everything is working or if there are warnings
✅ Why use this tool: It's directly from Google and checks your full email authentication setup, not just SPF.
It helps you spot issues that affect how Gmail and other services treat your domain.
Pricing: Free:- Includes check MX, SPF, DKIM, and DMARC records; ideal for Google Workspace users.
Tool Comparison Table
✅ What You Should Look For
No matter which tool you use, here’s what you want to see:
- ✅ SPF is valid or SPF pass → You’re good. Emails should land in inboxes.
- ❌ No SPF record found → You likely didn’t add it correctly, or it hasn’t updated yet.
- ❌ Multiple SPF records → You can only have one. Combine them into a single line.
- ⚠️ Too many DNS lookups → SPF only allows 10 lookups. You might be including too many services.
- ⚠️ Syntax errors → There's a formatting problem. You can fix this by using the Salesforge SPF Generator.
Common SPF Errors in Google Workspace and How to Fix Them
Here’s a simple table of the most common issues people run into while setting up their Google Workspace SPF record, along with clear explanations and fixes:
Pro Tips:
- ✅ Always test your SPF after making changes
- ✅ Only one SPF record per domain — combine others into the same line
- ✅ Use ~all or -all at the end, depending on your setup
- ✅ Stick to the format: v=spf1 include:... ~all
Want to Avoid Manual Setup and Errors?
If you're managing multiple domains or email inboxes, doing this over and over can become a headache.
That’s where Primeforge.ai can help.
If you’re handling multiple domains, inboxes, or running outbound email at scale, Primeforge makes things easier.
It automates the entire email infrastructure setup — including SPF, DKIM, DMARC, and inbox warmup — so you don’t have to do it manually every time.
Whether you're scaling outreach across Gmail or Outlook, Primeforge works on both.
💡 No need to touch DNS settings or worry about what goes wrong — Primeforge handles it all in the background.
Perfect for teams, agencies, or founders who just want their emails to land in inboxes without managing the setup manually.
Pricing: Starts at $45 per mailbox per month; pricing may vary based on usage and features.
Set Up SPF for Google Workspace: Best Practices
Once you’ve set up your Google Workspace SPF record, it’s easy to forget about it.
But email systems keep evolving — and so do the tools you use to send emails.
That’s why it’s good to follow a few best practices to keep your setup clean and reliable.
Here’s what you should always keep in mind:
✅ 1. Keep Only One SPF Record Per Domain
You should never have two separate SPF records in your DNS.
If you do, email services will ignore both, and your emails could get flagged or blocked.
Do this instead:
Always combine all senders into one single SPF record.
🔗 2. Combine Third-Party Senders Properly
If you send emails through services like Mailchimp, SendGrid, Postmark, or any CRM, you’ll need to include them in your existing SPF record.
Example:
makefile
CopyEdit
v=spf1 include:_spf.google.com include:sendgrid.net include:mailchimp.com ~all
Tip: Use the Salesforge SPF Generator to safely combine services without mistakes.
🟡 3. Use ~all or -all Wisely
At the end of every SPF record, you’ll see something like ~all or -all.
- ~all = Soft fail (recommended for most users)
→ Emails not listed in SPF still get delivered, but are marked as suspicious - -all = Hard fail
→ Blocks emails that don’t match your SPF — stricter, but riskier if you miss a valid sender
If you’re not sure, stick with ~all for safety.
🔁 4. Regularly Audit and Update Your SPF Record
Every few months, check your SPF record to make sure:
- You haven’t added any new email tools that need to be included
- You’re not still listing old services you no longer use
- You’re staying under the 10 DNS lookup limit
Use tools like MXToolbox or Google Admin Toolbox to review your current setup.
Following these best practices will help keep your domain trusted, your emails deliverable, and your Google Workspace setup running smoothly.
SPF Setup Checklist ✅
Before you move on, here’s a quick checklist to make sure your Google Workspace SPF record is set up correctly.
You can use this as a final review to avoid small mistakes that lead to big email problems.
If you’ve checked everything on this list, your SPF setup for Google Workspace is solid, and your emails should land in inboxes, not spam.
Final Thoughts: Wrapping Up Your Google Workspace SPF Setup
Setting up your Google Workspace SPF record is a small but powerful step.
It helps email providers trust your domain, keeps your emails out of spam, and protects you from spoofing.
In this guide, you’ve seen how to:
- Add the SPF record to your domain
- Test it using free tools
- Avoid common setup mistakes
- Follow best practices for long-term deliverability
It’s a one-time setup that pays off every time you hit send.
💡 If you're managing multiple domains or want to skip manual setup, tools like Primeforge can help you automate everything — from SPF to warmup — without the hassle.
FAQs About Google Workspace SPF Record
1. Do I need an SPF record if I’m only using Gmail or Google Workspace?
Yes. Even if you’re only using Gmail through Google Workspace, you still need to add an SPF record to your domain’s DNS settings.
It helps inboxes trust your emails and reduces spam risk.
2. What is the correct SPF record for Google Workspace?
Use this exact record:
v=spf1 include:_spf.google.com ~all
It tells other email services that Google is allowed to send emails for your domain.
If you're not sure how to create or modify this, the Salesforge SPF Generator can help you build one quickly, even if you’re new to DNS setup.
3. How long does it take for SPF changes to take effect?
Changes can take anywhere from a few minutes to 48 hours to fully propagate, depending on your domain provider.
4. Can I have more than one SPF record?
No. Only one SPF record is allowed per domain. If you're using multiple services (like Google, Mailchimp, or CRMs), you’ll need to combine them into a single SPF line.
5. What’s the difference between ~all and -all in SPF?
- ~all (soft fail) lets unauthorized emails through, but flags them as suspicious — safer for most users
- -all (hard fail) blocks unauthorized emails completely — stricter, but riskier if you miss a valid sender
6. What if I’m setting up SPF for many domains or inboxes?
Doing this manually for each one can get messy.
If you’re managing a large email setup or running cold outreach, a tool like Primeforge can handle SPF, DKIM, DMARC, and inbox warmup automatically, so you don’t have to do it one domain at a time.