How to set up SPF on Namecheap

Add an SPF record on Namecheap so mailbox providers can tell your real email from forgeries.

Why this matters to your business

SPF (Sender Policy Framework) is a short note in your domain’s DNS that lists which mail servers are allowed to send email using your name. When someone receives a message claiming to be from you, their mail provider checks that list. If the sending server isn’t on it, the message looks suspicious — and either lands in spam or gets blocked.

In plain terms: SPF makes it harder for someone to impersonate your business by email, and it helps your genuine emails reach the inbox instead of the junk folder. It is one record, it is free, and it takes a few minutes.

Before you start: is Namecheap actually running your DNS?

This is the step most people get wrong. A DNS record only works if Namecheap is the one answering DNS questions for your domain.

In Namecheap, open your Domain List, click Manage next to your domain, and look at the Nameservers section. If it says Namecheap BasicDNS (or PremiumDNS), you’re in the right place. If it points somewhere else (for example your website host or another provider), then your DNS lives there, not at Namecheap — add the SPF record on that other service instead, or nothing you do here will take effect.

Find one fact first: who sends your email?

SPF must name every service that sends mail for your domain. Common examples are Google Workspace, Microsoft 365, or whatever provider hosts your mailboxes. Each one publishes a value to put in your SPF record (often something like include:_spf.google.com for Google or include:spf.protection.outlook.com for Microsoft 365). Check your mail provider’s own help pages for the exact value — that’s the part you must get right.

Step-by-step on Namecheap

Sign in to Namecheap and open your Domain List.
Click Manage next to the domain.
Go to your DNS settings (look for DNS / Records / Advanced DNS).
Under the host records section, choose Add New Record and pick TXT Record.
In the Host field, enter @ — the @ means “the domain itself”. Do not type your domain name here.
In the Value field, enter your SPF text. A typical record looks like: v=spf1 include:_spf.google.com ~all Replace the include: part with the value(s) your actual mail provider tells you to use.
Leave TTL on Automatic unless you have a reason to change it.
Save the record (the green tick / Save All Changes).

Namecheap quirks people get wrong

Only one SPF record per domain. You cannot have two v=spf1 TXT records — mail providers will treat that as broken. If you already have one, edit it to add the new service rather than creating a second.
Don’t wrap it in quotes. Namecheap adds the quoting itself. Just paste the plain text starting with v=spf1. If you type your own " marks, you can end up with a malformed record.
Host is @, not your domain. Typing the full domain name in the Host field is a common slip.
~all vs -all. ~all (softfail) means “anything not listed is suspicious”; -all (hardfail) means “reject anything not listed”. Start with ~all while you confirm everything sends correctly, then tighten to -all once you’re sure your list is complete.
Changes aren’t instant. DNS updates can take anywhere from a few minutes to a couple of hours to spread.

Verify it worked

Once you’ve saved the record and given it a little time to take effect, verify it with the free check on this site. It will tell you in plain language whether your SPF record is present and correctly formed.

Done? Check your domain free to confirm it worked — and see your full grade across all 34 checks.