[ Setup article ]

How to Setup SPF for Amazon SES?

1 min readBy Team EA

The Sender Policy Framework (SPF) is an email authentication system that detects forged sender addresses while the email is being delivered. SPF, on the other hand, is confined to detecting a forged sender claim in the email’s envelope, which is used when it bounces.

Before we set up SPF for Amazon SES, there are two things that we must know.

  1. If you use subdomain.amazonses.com as the MAIL FROM domain, all emails sent via that domain pass the SPF check by default since Amazon has already published SPF records for the same domain. Thus, you don’t need to do anything to set up SPF.
  2. If you use a different domain, you will need to follow some steps to set up SPF for Amazon SES. 

Follow these to do the same :

  • In case you have no SPF record on your domain, publish the following SPF record on it:

v=spf1 include:amazonses.com -all

  • If you have an existing SPF record, insert include:amazonses.com before the terminating mechanism.  

For example, if your SPF record is like this: v=spf1 a -all; update it to v=spf1 a include:amazonses.com -all.

  • Save changes and wait for 24 hours for them to take effect. 

Henceforth, use our free SPF record check tool to validate your record.

[ SPF guide ]

Part of the Knowledge BaseSending-service implementation guides · 365 guides

Enterprise provenance

Why top financial institutions and governments retired their email security dashboards.

Traditional email authentication platforms sell you a dashboard and ask your engineers to do the labour. In high-stakes environments, manual oversight means delayed enforcement, configuration drift and unmonitored shadow domains.

EmailAuth is the agentic email provenance platform. Our agents enforce p=reject, keep third-party senders aligned and move your domains to full RFC 9989 compliance, the new DMARC standard,, with human-in-the-loop auditability.

Governments Large enterprises Tier-1 financial institutions

SaaS · Dedicated tenancy · Air-gapped on-prem · BYOK encryption

[ Keep reading ]

All posts