How to Set Up SPF for office365?

1 min readBy Team EA

The Sender Policy Framework (SPF) is an email authentication system that detects forged sender addresses while the email is being delivered. SPF, on the other hand, is confined to detecting a forged sender claim in the email’s envelope, which is used when it bounces.

Before you can use Office 365 to send emails on your behalf, a new SPF record is to be added by the user. To do so, follow the next few steps:

NOTE: The SPF record mechanism used for different sender domains is listed in the image below:

NOTE: If you are hosted on Office 365 completely, you need not do anything. It is enabled by default.

If you use sender domains not listed above and have them authorised in your SPF record, add include:spf.protection.outlook.com to your preexisting SPF record.

You can verify your SPF records using our SPF checker tool here.

Part of the Knowledge BaseSending-service implementation guides · 365 guides

Enterprise provenance

Why top financial institutions and governments retired their email security dashboards.

Traditional email authentication platforms sell you a dashboard and ask your engineers to do the labour. In high-stakes environments, manual oversight means delayed enforcement, configuration drift and unmonitored shadow domains.

EmailAuth is the agentic email provenance platform. Our agents enforce p=reject, keep third-party senders aligned and move your domains to full RFC 9989 compliance, the new DMARC standard, with human-in-the-loop auditability.

Governments Large enterprises Tier-1 financial institutions

SaaS · Dedicated tenancy · Air-gapped on-prem · BYOK encryption

All posts

How to Set Up SPF for office365?

Why top financial institutions and governments retired their email security dashboards.

The Ultimate Guide to Checking SPF Syntax for Email Authentication

How to Choose the Right SPF Tester for Your Business?

The Ultimate Guide to Understanding the Difference Between SPF ~all and -all