[ Setup article ]

How to Set Up SPF for Salesforce?

1 min readBy Team EA

Salesforce DNS configuration screen

The Sender Policy Framework (SPF) is an email authentication system that detects forged sender addresses while the email is being delivered. SPF, on the other hand, is confined to detecting a forged sender claim in the email’s envelope, which is used when it bounces.

Before setting up SPF for Salesforce, you will need to ensure that Salesforce’s bounce management is disabled. 

You can do that in two steps:

  1. Go to Setup>Email Administration>Deliverability
  2. Uncheck the following boxes: 
    1. Activate bounce management
    2. Enable compliance with standard email security mechanisms

Salesforce DNS configuration screen

Now you are ready to add Salesforce to your SPF record. Follow the next few steps to do the same:

  • If you have a pre-existing SPF record, you will need to add include:_spf.salesforce.com to your existing SPF record. 
  • If you don’t have an existing SPF record, add the following SPF record v=spf1 include:_spf.salesforce.com -all to your DNS.

After you have set up SPF, check your records using our free SPF validator tool.

[ SPF guide ]

Part of the Knowledge BaseSending-service implementation guides · 365 guides

Enterprise provenance

Why top financial institutions and governments retired their email security dashboards.

Traditional email authentication platforms sell you a dashboard and ask your engineers to do the labour. In high-stakes environments, manual oversight means delayed enforcement, configuration drift and unmonitored shadow domains.

EmailAuth is the agentic email provenance platform. Our agents enforce p=reject, keep third-party senders aligned and move your domains to full RFC 9989 compliance, the new DMARC standard, with human-in-the-loop auditability.

Governments Large enterprises Tier-1 financial institutions

SaaS · Dedicated tenancy · Air-gapped on-prem · BYOK encryption

[ Keep reading ]

All posts