Skip to main content
spf PROTOCOLHost: AWS Route 53Standard: RFC 7208

How to Configure Sender Policy Framework (SPF) on AWS Route 53

Specifies which IP addresses and email service providers are authorized to send email on behalf of your domain. Follow this verified implementation guide to deploy standard compliant SPF DNS records in AWS Route 53.

Default SPF Record Syntax

// Authoritative RFC Example
v=spf1 include:_spf.example.com ~all

Configuration Steps in AWS Route 53

  1. 1Open the AWS Management Console and navigate to Route 53.
  2. 2Select "Hosted zones" and click on your domain zone.
  3. 3Filter records by the target subdomain name.
  4. 4Select the checkbox next to the orphaned record.
  5. 5Click "Delete record" and confirm the deletion dialog.

Verification Checklist (RFC 7208)

Extract TXT records on the root domain looking for "v=spf1".
Verify that there is strictly ONE SPF record (multiple records cause PermError).
Count total DNS lookups (RFC 7208 strictly limits recursive DNS evaluations to 10).
Ensure the record ends with "~all" (SoftFail) or "-all" (HardFail).
Live Validation Engine

Validate Your AWS Route 53 SPF Record

Verify propagation, check syntax formatting, and audit recursive lookups in 60 seconds with SubDomainWatch.

Run Free DNS Validator