Defaults.Exposed › Setup › SPF

How to set up SPF on IONOS

Add an SPF record in your IONOS DNS so the world knows which servers may send email using your domain.

Why this matters to your business

SPF (Sender Policy Framework) is a short note in your domain’s DNS that lists which mail servers are allowed to send email “from” your domain. Without it, scammers can forge your address to send invoices, payment requests or fake quotes to your customers and suppliers — and your own legitimate email is more likely to land in spam. Setting SPF up is free, takes a few minutes, and is one of the strongest, cheapest things you can do to protect your name and keep your email getting delivered.

Before you start: is IONOS actually running your DNS?

This is the single most common reason these changes “do nothing.” A DNS record only takes effect if IONOS is where your domain’s nameservers point.

• If you bought the domain at IONOS and never moved it, IONOS is almost certainly your DNS host — you’re in the right place.
• If you point your domain at someone else’s nameservers (for example Cloudflare, another web host, or your email provider), then the SPF record must be added there, not at IONOS. Adding it at IONOS will have no effect.

In your IONOS account, open Domains & SSL, select your domain, and check the Nameserver details. If it shows IONOS’s own nameservers, continue below. If it shows another company’s nameservers, go add SPF in that company’s DNS instead.

What you’ll add

A single TXT record that lists your senders. The exact value depends on who sends your email. A common example for a domain that sends only through Microsoft 365 is:

v=spf1 include:spf.protection.outlook.com -all

For Google Workspace it’s usually:

v=spf1 include:_spf.google.com ~all

Use the SPF value your email provider tells you to use. You should have only one SPF (TXT starting with v=spf1) record per domain — if you already have one, edit that one rather than adding a second.

Steps in IONOS

1. Log in to IONOS and open the Domains & SSL area.
2. Click your domain, then open the DNS settings (look for the DNS tab or Adjust DNS settings).
3. Review the existing records. If an SPF (TXT starting with v=spf1) record is already present, edit that one rather than adding a second.
4. Click Add record and choose TXT as the type.
5. In the Host name field, enter @. The @ means “the domain itself.” Do not put your full domain name here.
6. In the Value field, paste your SPF string, e.g. v=spf1 include:spf.protection.outlook.com -all.
7. Leave TTL at the default (1 hour is fine).
8. Click Save.

IONOS quirks people get wrong

• Use @ for the host, not your domain. IONOS appends the domain for you. Putting the full domain in the Host name field creates the record at the wrong place.
• No quotes. Type the SPF value plain. Do not wrap it in double quotes — IONOS handles the quoting itself, and pasting a quoted value can result in a broken record.
• Only one SPF record. Two v=spf1 records is an error and breaks SPF entirely. If you add a second sender (say you start using a newsletter tool as well), combine them into one record using extra include: entries — don’t create a second TXT.
• Watch the MailBasic/email defaults. If you use IONOS email, the zone may already carry an SPF record — check before adding so you don’t end up with two.
• Changes aren’t instant. DNS can take from a few minutes up to a couple of hours to update everywhere.

Verify it worked

Once saved, confirm the record is live and correct with the free check on Defaults.Exposed. Enter your domain and it’ll tell you in plain language whether your SPF is set up properly. Your data is processed in the EU.

Done? Check your domain free to confirm it worked — and see your full grade across all 34 checks.