How to customize the SPF Record in cPanel to ensure email security. SPF (Sender Policy Framework) records are an essential part of email security. They help prevent spammers from sending emails on behalf of your domain, improving email deliverability and protecting your domain’s reputation. Hosted.com® allows you to easily create, customize, and manage records in cPanel.
TABLE OF CONTENTS
What is an SPF Record?
An SPF record is a type of TXT record in your domain’s DNS settings that specifies which mail servers are authorized to send emails on behalf of your domain.
Properly configured:
- Reduces spam and phishing attacks.
- Improves the likelihood that your emails reach recipients’ inboxes.
- Protects your domain from being blacklisted.
How to Customize the SPF Record in cPanel
1. Login to your Hosted.com® account.
2. Navigate to your web hosting plan from the Manage Services menu.
3. Click Manage next to the hosting plan associated with your domain.
4. Click Login next to Control Panel to open cPanel.

5. Scroll down to the Email section and click Email Deliverability.

6. Locate your domain and find the SPF record section. You will usually see the current SPF configuration.
7. Click Manage or Edit to customize the record.
8. Add, remove, or modify the IP addresses or hostnames that are authorized to send emails from your domain.
Common elements include:
v=spf1 – Indicates the SPF version.
ip4: – Authorizes a specific IPv4 address.
ip6: – Authorizes a specific IPv6 address.
include: – Authorizes third-party services (like Google Workspace).
~all or -all: – Defines how strict the SPF policy should be (~all is soft fail, and -all is hard fail)
9. Once you have made the necessary changes, click Save or Update to apply.
Additional Information
- Propagation Time: DNS changes can take 30 minutes to 24 hours to propagate worldwide.
- Testing: Use online tools like MXToolbox to verify that it is correct and functioning.
- Combining DKIM & DMARC: For stronger email security, configure DKIM and DMARC records alongside SPF.
- Avoid Multiple SPF Records: Each domain should have only one SPF record to prevent validation errors.
- Hosted Services: If you use external email services like Google Workspace or Microsoft 365, include their servers in your SPF record using the include: mechanism.
- Email Deliverability: Properly configured will improve trust with email providers, reducing the chance that your emails land in spam folders.
- Monitoring Changes: Keep track of changes when you add or remove services that send emails on behalf of your domain.



