How to Set Up SPF for SendGrid

Authorize SendGrid to send email on behalf of your domain by adding the correct SPF include or by completing domain authentication.

Quick Answer — The Record You Need

Record Type

TXT

Host / Name

Value

v=spf1 include:sendgrid.net ~all

If using SendGrid domain authentication (recommended), SPF is handled automatically via a CNAME record. Manual SPF include is the alternative.

Step-by-Step Setup

Log in to SendGrid

Go to app.sendgrid.com and sign in to your account.

Start domain authentication

Navigate to Settings > Sender Authentication > Domain Authentication. Click "Authenticate Your Domain". SendGrid recommends domain authentication over manual SPF.

Select your DNS host and enter your domain

Choose your DNS provider from the dropdown and enter your sending domain. SendGrid will generate the DNS records you need.

Add DNS records

SendGrid will provide CNAME records that handle SPF automatically. If you prefer a manual SPF include instead, add include:sendgrid.net to your SPF record.

v=spf1 include:sendgrid.net ~all

Verify in SendGrid

Click "Verify" in SendGrid. The platform will check your DNS records and confirm authentication is complete.

Before & After

Before

v=spf1 include:_spf.google.com ~all

After

v=spf1 include:_spf.google.com include:sendgrid.net ~all

Common Gotchas

SendGrid's domain authentication uses CNAME records that handle SPF automatically. If you use domain authentication, you do not need a separate include:sendgrid.net in your SPF record.
If you choose manual SPF, the include is sendgrid.net (not app.sendgrid.com or email.sendgrid.com).
SendGrid domain authentication was previously called "whitelabel". Documentation using the old term still applies.

Verify Your Setup

After adding your DNS records, use our free SPF checker to verify everything is configured correctly. DNS changes typically propagate within minutes, but can take up to 48 hours.

Frequently Asked Questions

What SPF record do I need for SendGrid?

If using manual SPF, add include:sendgrid.net to your SPF record. If using SendGrid domain authentication (recommended), SPF is handled via CNAME records and no manual SPF include is needed.

Should I use domain authentication or manual SPF with SendGrid?

SendGrid recommends domain authentication. It uses CNAME records that automatically handle SPF and DKIM, and it gives you better control over your sender reputation.

Can I use SendGrid and Google Workspace SPF together?

Yes. Combine both includes in a single SPF record: v=spf1 include:_spf.google.com include:sendgrid.net ~all.