Skip to main content
spf PROTOCOLHost: Azure DNSStandard: RFC 7208

How to Configure Sender Policy Framework (SPF) on Azure DNS

Specifies which IP addresses and email service providers are authorized to send email on behalf of your domain. Follow this verified implementation guide to deploy standard compliant SPF DNS records in Azure DNS.

Default SPF Record Syntax

// Authoritative RFC Example
v=spf1 include:_spf.example.com ~all

Configuration Steps in Azure DNS

  1. 1Navigate to the Azure Portal and select "DNS zones".
  2. 2Select your authoritative domain zone.
  3. 3Find the record set corresponding to the dangling subdomain.
  4. 4Click "Delete" from the top command toolbar.
  5. 5Confirm deletion to release the DNS binding.

Verification Checklist (RFC 7208)

Extract TXT records on the root domain looking for "v=spf1".
Verify that there is strictly ONE SPF record (multiple records cause PermError).
Count total DNS lookups (RFC 7208 strictly limits recursive DNS evaluations to 10).
Ensure the record ends with "~all" (SoftFail) or "-all" (HardFail).
Live Validation Engine

Validate Your Azure DNS SPF Record

Verify propagation, check syntax formatting, and audit recursive lookups in 60 seconds with SubDomainWatch.

Run Free DNS Validator